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TITLE OF IN VENTION 

RFID Reader for a Security Network 

CROSS REFERENCE TO RELATED APPLICATIONS 

This patent application is a continuation-in-part of US application serial number 10/423,887, 
5 RFID Based Security Network, attorney document number RFID-0106, filed April 28, 2003 by 
the inventor of the present application. This patent application is further cross referenced to the 
patent application filed on February 3, 2003, titled RFID Based Security System, by the inventor 
of the present application, attorney document number RFID-0100 (US application serial number 
10/356,512). This patent application is further cross referenced to the following patent 
10 applications, all filed February 14, 2003 by the inventor of the present application: 

Communications Control in a Security System, RFID-0101 (10/366,320); 
Device Enrollment in a Security System, RFID-0102 (10/366,335); 
Controller for a Security System, RFID-0103 (10/366,334); 
RFID Transponder for a Security System, RFID-0104 (10/366,317); 
15 RFID Reader for a Security System, RFID-0105 (10/366,3 16). 

All of the foregoing cross referenced patent applications are incorporated by reference into this 
present patent application. 

BACKGROUND OF THE INVENTION 

20 Security systems and home automation networks are described in numerous patents, and have 
been in prevalent use for over 40 years. In the United States, there are over 14 million security 
systems in residential homes alone. The vast majority of these systems are hardwired systems, 
meaning the keypad, system controller, and various intrusion sensors are wired to each other. 
These systems are easy to install when a home is first being constructed and access to the 

25 interiors of walls is easy; however the cost increases substantially when wires must be added to 
an existing home. On average, the security industry charges approximately $75 per opening (i.e. 
window or door) to install a wired intrusion sensor (such as a magnet and reed switch), where 
most of this cost is due to the labor of drilling holes and running wires to each opening. For this 
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reason, most homeowners only monitor a small portion of their openings. This is paradoxical 
because most homeowners actually want security systems to cover their entire home. 

In order to induce a homeowner to install a security system, many security companies will 
underwrite a portion of the costs of installing a security system. Therefore, if the cost of 
5 installation were $1,500, the security company may only charge $500 and then require the 

homeowner to sign a multi-year contract with monthly fees. The security company then recovers 
its investment over time. Interestingly enough, if a homeowner wants to purchase a more 
complete security system, the revenue to the security company and the actual cost of installation 
generally rise in lockstep, keeping the approximate $1,000 investment constant. This actually 
10 leads to a disincentive for security companies to install more complete systems - it uses up more 
technician time without generating a higher monthly contract or more upfront profit. 
Furthermore, spending more time installing a more complete system for one customer reduces 
the total number of systems that any given technician can install per year, thereby reducing the 
number of monitoring contracts that the security company obtains per year. 

15 In order to reduce the labor costs of installing wired systems into existing homes, wireless 
security systems have been developed in the last 10 to 20 years. These systems use RF 
communications for at least a portion of the keypads and intrusion sensors. Typically, a 
transceiver is installed in a central location in the home. Then, each opening is outfitted with an 
intrusion sensor connected to a small battery powered transmitter. The initial cost of the wireless 

20 system can range from $25 to $50 for each transmitter, plus the cost of the centrally located 
transceiver. This may seem less that the cost of a wired system, but in fact the opposite is true 
over a longer time horizon. Wireless security systems have demonstrated lower reliability than 
wired systems, leading to higher service and maintenance costs. For example, each transmitter 
contains a battery that drains over time (perhaps only a year or two), requiring a service call to 

25 replace the battery. Many of these transmitters lose their programming when the battery dies, 

requiring reprogramming along with the change of battery. Further, in larger houses, some of the 
windows and doors may be an extended distance from the centrally located transceiver, causing 
the wireless communications to intermittently fade out. 

These types of wireless security systems generally operate under 47 CFR 15.231(a), which 
30 places severe limits on the amount of power that can be transmitted. For example, at 433 MHz, 
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used by the wireless transmitters of one manufacturer, an average field strength of only 1 1 mV/m 
is permitted at 3 meters (equivalent to approximately 36 microwatts). At 345 MHz, used by the 
wireless transmitters of another manufacturer, an average field strength of only 7.3 mV/m is 
permitted at 3 meters (equivalent to approximately 16 microwatts). Furthermore, control 
5 transmissions are only permitted once per hour, with a duration not to exceed one second. If 

these same transmitters wish to transmit data under 47 CFR 15.231(e), the average field strengths 
at 345 and 433 MHz are reduced to 2.9 and 4.4 mV/m, respectively. (In a proceeding opened in 
October, 2001, the FCC is soliciting comments from the industry under which some of the rules 
of this section may change.) The problems of using these methods of transmission are discussed 

10 in various patents, including 6,087,933, 6,137,402, 6,229,997, 6,288,639, and 6,294,992. In 
addition, as disclosed in 6,026,165 since centrally located transceivers must have a range 
sufficient to attempt to reach throughout the house these transceivers can also transmit and 
receive signals to/from outside the house and are therefore vulnerable to hacking by 
sophisticated intruders. Therefore, for the foregoing reasons and others, a number of reputable 

1 5 security monitoring companies strongly discourage the use of wireless security systems. 

In either wired or wireless prior art security systems, additional sensors such as glass breakage 
sensors or motion sensors are an additional cost beyond a system with only intrusion sensors. 
Each glass breakage or motion sensor can cost $30 to $50 or more, not counting the labor cost of 
running wires from the alarm panel to these sensors. In the case of wireless security systems, the 
20 glass breakage or motion sensor can also be wireless, but then these said sensors suffer from the 
same drawback as the transmitters using for intrusion sensing - they are battery powered and 
therefore require periodic servicing to replace the batteries and possible reprogramming in the 
event of memory loss. 

Because existing wireless security systems are not reliable and wired security systems are 
25 difficult to install, many homeowners forego self-installation of security systems and either call 
professionals or do without. It is interesting to note that, based upon the rapid growth of home 
improvement chains such as Home Depot and Lowe's, there is a large market of do-it-yourself 
homeowners that will attempt carpentry, plumbing, and tile - but not security. There is, 
therefore, an established need for a security system that is both reliable and capable of being 
30 installed by the average homeowner. 
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Regardless of whether a present wired or wireless security system has been installed by a 
security company or self-installed, almost all present security systems are capable of only 
monitoring the house for intrusion, fire, or smoke. These investments are technology limited to a 
substantially single purpose. There would be a significant advantage to the homeowner if the 
5 security system were also capable of supporting additional home automation and lifestyle 
enhancing functions. There is, therefore, an apparent need for a security system is actually a 
network of devices serving many functions in the home. 

Radio Frequency Identification, or RFID, technology has been in existence for over 40 years, 
with substantial development by a number of large companies. A search of the USPTO database 

10 will reveal several hundred RFID-related patents. Surprisingly, though, a number of large 
companies such as Micron and Motorola have exited the RFID business as the existing 
applications for RFID have not proved lucrative enough. Most development and applications for 
RFID technology have been targeted at moveable items - things, people, animals, vehicles, 
merchandise, etc. - that must be tracked or counted. Therefore, RFID has been applied to animal 

1 5 tracking, access control into buildings, inventory management, theft detection, toll collections, 
and library and supermarket checkout. In each of the applications, the low-cost RFID 
transponder or tag is affixed to the moveable object, and the RFID reader is generally a much 
higher cost transceiver. The term "RFID reader" or "RFID interrogator" is commonly used in the 
industry to refer to any transceiver device capable of transmitting to and receiving signals from 

20 RFID tags or RFID transponders. The terms "RFID tag" or "RFID transponder" are commonly 
used interchangeably in the industry to refer to the device remote from the RFID reader, with 
which the RFID reader is communicating. For example, in a building access application, an 
RFID reader is usually affixed near the entrance door of a building. Persons desiring access to 
the building carry an RFID tag or RFID transponder, sometimes in the form of an ID card, and 

25 hold this RFID tag or RFID transponder next to or in the vicinity of the RFID reader when 

attempting entry to the building. The RFID reader then "reads" the RFID tag, and if the RFID tag 
is valid, unlocks the entrance door. 

The relative high cost (hundreds to thousands of dollars) of RFID readers is due to the 
requirement that it perform reliably in each mobile application. For example, the RFID reader for 
30 a toll collection application must "read" all of the RFID tags on cars traveling 40 MPH or more. 
Similarly, access control must read a large number of RFID tags in a brief period of time 
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(perhaps only hundreds of milliseconds) while people are entering a building. Or a portable 
RFID reader must read hundreds or thousands of inventory RFID tags simultaneously while the 
operator is walking around a warehouse. Each of these applications can be fairly demanding 
from a technical standpoint, hence the need for sophisticated and higher cost readers. To date, 
5 RFID technology has not been applied to the market for security systems in homes or businesses. 

It is therefore an object of the present invention to provide security system for use in residential 
and commercial buildings that can be self-installed or installed by professionals at much lower 
cost than present systems. It is a further object of the present invention to provide a combination 
of RFID transponders and RFID readers that can be used in a security system for buildings. 

1 0 BRIEF SUMMARY OF THE INVENTION 

The present invention is a highly reliable system and method for constructing a security system, 
or security network, for a building comprising a network of devices and using a novel approach 
to designing RFID readers and RFID transponders to provide the radio link between each of a 
number of openings and a controller function 250 capable of causing an alert in the event of an 
15 intrusion. 

The present invention improves upon the traditional system model and paradigm by providing a 
security system with reliability exceeding that of existing wireless security systems, at lower cost 
than either professionally installed hardwired systems or wireless security systems. The present 
invention also allows self-installation, including incremental expansion, by typical homeowners 
20 targeted by the major home improvement chains. In the case of already installed security 

systems, present in more than 14 million residential homes, the present invention also provides 
an RFID reader that can be wired to and powered from existing control panels, directly or 
indirectly. 

Several new marketing opportunities are created for security systems that are otherwise 
25 unavailable in the market today. First, for professional systems sold by major alarm companies, a 
single customer service representative may sell the system to a homeowner and then install the 
system in a single visit to the customer's home. This is in contrast to the present model where a 
salesperson sells the system and then an installer must return at a later date to drill holes, pull 
wires, and otherwise install the system. Second, there is a product upgrade available for existing 
30 systems whereby the scope of security coverage can be increased by adding RFID readers and 
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RFID transponders to an existing control panel. Third, homeowners may purchase the inventive 
system at a home improvement chain, self-install the system, and contract for alarm monitoring 
from an alarm services company. The overall system cost is lower, and the alarm services 
company is not required to underwrite initial installation costs, as is presently done today. 
5 Therefore, the alarm services company can offer monitoring services at substantially lower 
prices. Fourth, a new market for apartment dwellers opens up. Presently, very few security 
systems are installed in apartments because building owners are unwilling to permit the drilling 
of holes and installation of permanent systems. Apartment dwellers are also more transient than 
homeowners and therefore most apartment dwellers and alarm service companies are unwilling 
10 to underwrite the cost of these systems anyway. The inventive system is not permanent, nor is 
drilling holes for hardwiring required. Therefore, an apartment dweller can purchase the 
inventive security system, use it in one apartment, and then unplug and move the system to 
another apartment later. 

The improvements provided by the present invention are accomplished through the following 
15 innovations. The first innovation is the design of a low cost RFID reader that can be installed 
onto an outlet and cover an area the size of a large room in the example of a house. Rather than 
rely on the centrally located transceiver approach of existing unreliable wireless security 
systems, the present invention places the RFID reader into each major room for which coverage 
is desired. The RFID reader has a more limited range than the centrally located transceiver, and 
20 is therefore less susceptible to hacking by sophisticated intruders. For the example of smaller to 
medium sized houses, a single RFID reader may be able to cover more than one room. 
Furthermore, the presence of multiple RFID readers within a building provides spatial receiver 
diversity. 

The second innovation is the design of a low cost RFID reader that can be installed in 
25 conjunction with the control panels of existing security systems, in particular wired security 

systems that can make power available to the RFID reader in the same manner as control panels 
make power available to prior art motion detectors, glass breakage detectors, and other sensors. 

The third innovation is the use of an RFID transponder to transmit data from covered openings 
and sensors. As is well known there is at least an order of magnitude difference in the 
30 manufacturing costs of RFID transponders versus present wireless security system transmitters. 
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This is due both to difference in design, as well as manufacturing volumes of the respective 
components used in the two different designs. 

The fourth innovation is the provision of a circuitry in both the RFID reader and the RFID 
transponder for the charging of any battery included in the RFID transponder. For some 
5 installations, a battery may be used in the RFID transponder to increase the range and reliability 
of the RF link between reader and transponder. The present problem of short battery life in 
wireless security system transmitters is overcome by the transfer of power through radio waves. 
The RFID reader receives its power from a permanent power source such as standard AC outlets, 
and converts some of this power into RF energy, which can then be received by the RFID 
1 0 transponder and used for battery charging. 

The fifth innovation is the status monitoring of the need for battery charging. The RFID 
transponder can indicate to the RFID reader when power for charging is required. If desired, the 
RFID reader can shut off its transmitter if no power transfer is required, thereby reducing RF 
emissions and any possible interference. 

15 The sixth innovation is the use of multiple forms of communications, providing different levels 
of communications cost, security, and range. The lowest cost and most prevalent form of 
communications is expected to be active RF communications, operating under 47 CFR 15.247. 
Thus an RFID reader can perform both RFID functions and RF communications using shared RF 
circuits and antennas. The system can also include the use of power line carrier communications, 

20 if desired, between the RFID readers and one or more other devices. Also, the RFID readers can 
be hardwired to a control panel or controller. Relative to hardwiring, a significant installation 
cost advantage is obtained by allowing the RFID readers to "piggyback" on the standard AC 
power lines already in the building. By using the RF communications or power line carrier 
connection technique, an example homeowner can simply plug in the controller to a desired 

25 outlet, plug in the RFID readers in an outlet in the desired covered rooms, configure the system 
and the system is ready to begin monitoring RFID transponders. 

The seventh innovation is the optional inclusion of a glass breakage or motion sensor into the 
RFID reader. In many applications, an RFID reader will be likely be installed into each major 
room of a house, using the same example throughout this document. Rather than require a 
30 separate glass breakage or motion sensor as in prior art security systems, a form of the RFID 
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reader includes a glass breakage or motion sensor within the same integrated package, providing 
a further reduction in overall system cost when compared to prior art systems. 

The eighth innovation is the permitted use of multiple distributed controller functions in the 
security system. In the present invention, the controller function can be located within RFID 
5 readers, the keypad for the security system, or even the alarm panel of a prior art security system. 
Therefore, a homeowner or building owner installing multiple devices will also simultaneously 
be installing multiple controller functions. The controller functions operate in a redundant mode 
with each other. Therefore, if an intruder discovers and disables a single device containing a 
controller function, the intruder may still be detected by the any of the remaining installed 
10 devices containing controller functions. 

The ninth innovation is the permitted optional use of the traditional public switched telephone 
network (i.e. PSTN - the standard home phone line), the integrated use of a commercial radio 
mobile service (CMRS) such as a TDMA, GSM, or CDMA wireless network, or the use of a 
broadband internet network via Ethernet or WiFi connection for causing an alert at an emergency 
1 5 response agency such as an alarm service company. In particular, the use of a CMRS network 
provides a higher level of security, and a further ease of installation. The higher level of security 
results from (i) reduced susceptibility of the security system to cuts in the wires of a PSTN 
connection, and (ii) optional use of messaging between the security system and an emergency 
response agency such that any break in the messaging will in itself cause an alert. 

20 Additional objects and advantages of this invention will be apparent from the following detailed 
description. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows the RFID reader communicating with RFID transponders and other transmitters. 

Figure 2A shows the three means by which the RFID reader and gateway can communicate with 
25 each other. 

Figure 2B shows an example network architecture if the RFID readers and gateways used power 
line carrier communications. 

Figure 2C shows an example network architecture if the RFID readers and gateways used active 
RF communications. 
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Figure 3 shows a generalized network architecture of the security network. 

Figure 4 shows the distributed manner in which the present invention would be installed into an 
example house. 

Figure 5 A shows a generalized architecture of a device in the security system containing a 
5 control function. 

Figure 5B shows the control functions in multiple devices logically connecting to each other. 

Figure 6 shows the multiple ways in which a gateway can be configured to reach different 
private and external networks. 

Figure 7 shows some of the multiple ways in which a gateway can be configured to reach 
10 emergency response agencies and other terminals. 

Figure 8 shows an example layout of a house with multiple RFID readers, and the manner in 
which the RFID readers may form a network to use wireless communications to reach a gateway. 

Figure 9 shows the architecture of the RF reader. 

Figure 10 shows the architecture of the gateway. 

15 Figure 1 1 shows the architecture of the RF transponder. 

Figure 12 shows the architecture of the RF transponder with an amplifier. 

Figure 13 is a flow chart for a method of providing a remote monitoring function. 

Figure 14 shows the manner in which an RFID reader can be connected to a controller that is 
designed to interface with a prior art alarm panel. 

20 Figure 1 5 shows the manner in which an RFID reader can be connected to a controller that is part 
of a prior art alarm panel. 

Figure 16 shows an example configuration in which power line carrier communications is used. 

Figure 17 shows an example embodiment of an RF reader without an acoustic transducer, and in 
approximate proportion to a standard power outlet. 

25 Figure 1 8 A shows an example embodiment of an RF reader with an acoustic transducer. 

Figure 18B shows an example embodiment of an RF reader integrated with an outlet. 
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Figures 19A and 19B show one means by which the controller or RFID reader may be mounted 
to a plate, and then mounted to an outlet. 

Figures 20A and 20B show the locations on the RFID reader where patch or microstrip antennas 
may be mounted so as to provide directivity to the transmissions. 

5 Figure 21 shows an example embodiment of a keypad and display. 

Figure 22 shows one means by which the keypad may be mounted onto an electrical box while 
permitting a light switch to protrude. 

Figure 23 A shows an example embodiment of a passive infrared sensor integrated into a light 
switch. 

10 Figure 23B shows an example embodiment of a gateway. 

Figures 24A and 24B show alternate forms of a passive infrared sensor that may be used with the 
security system. 

Figures 25 A and 25B show examples of LED generators and LED detectors that may be used as 
intrusion sensors. 

15 Figure 26 shows examples of corner antennas for RFID transponders and examples of window 
frames in which they may be mounted. 

DETAILED DESCRIPTION OF THE INVENTION 

The present invention is a highly reliable system and method for constructing a security system, 
or security network, for use in a building, such as a commercial building, single or multifamily 

20 residence, or apartment. For consistency with the cross referenced applications, the term security 
system shall be used throughout, though in the context of this present application, the terms 
security system and security network shall be considered interchangeable as they apply to the 
present invention. The security system may also be used for buildings that are smaller structures 
such as sheds, boathouses, other storage facilities, and the like. Throughout this specification, a 

25 residential house will be used as an example when describing aspects of the present invention. 
However, the present invention is equally application to other types of buildings. 

There are 4 primary elements to the security system: an intrusion sensor 600, an RFID 
transponder 100, an RFID reader 200, and a controller function 250. Figure 1 shows a very basic 
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configuration of the security system with a single RFID reader 200 communicating with several 
RFID transponders 100, one of which has an associated intrusion sensor 600, one of which has 
any one of several other sensors 620, an a third which has no sensor. The controller function 250 
is not shown in the diagram, but is present in the RFID reader 200. 

5 A security system with a single RFID reader 200 can be expanded to support multiple RFID 

readers 200. In addition, the system can communicate with external networks 410 using a device 
known as a gateway 300. Figures 2A, 2B, and 2C show the means by which multiple RFID 
readers 200 and gateways 300 communicate with each other in the security system. Figure 2A 
shows three available connections: via active RF communications 422, via power line carrier 

1 0 communications 202 over the power lines 430, or via hardwire connection 43 1 . Figure 2B shows 
communications via power line carrier communications 202, where any of the devices can 
directly connect to any of the other devices. Figure 2C shows a network in which active RF 
communications 422 is used; some of the devices can directly communicate with each other and 
some pairs of devices can only communicate through one or more intermediate devices. Figure 8 

15 shows an example of how the logical architecture of Figure 2C might appear in a sample 
residence. 

Regardless of the form of communications chosen by any one designer or installer of this system, 
all of the devices, once installed, form a security network 400 with each other as shown in Figure 
3. That is, the physical connection means is separated from the logical networking software, and 
20 regardless of physical connection means, the devices of the security system become aware of and 
communicate with each other. Figure 3 shows various examples of the types of devices that can 
be contained and can communicate within a security system. As can be further seen in Figure 3, 
different example gateways 300, 510, and 520 show how the devices in the security system can 
also communicate to networks and devices external to the security system. 

25 In addition to the primary elements of the security system, other devices 550 and functions can 
be added and integrated. In the context of this application, the term "other device 550" means 
generically any powered device generally following the architecture shown in Figure 5A, and 
includes RFID readers 200, gateways 300, email devices 530, siren devices 530, camera/audio 
devices 540, as well as devices not specifically identified here but designed to operate in the 
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inventive security system by connecting to the security network 400 and capable of 
communicating over the security network 400 with example devices shown in Figure 5A. 

A keypad 500 may be added to provide a method for user interface. A gateway 300 can be 
provided to enable communications between the security system and external networks 410 such 
5 as, for example, a security monitoring company. The gateway 300 may also convert protocols 
between the security system and a WiFi network 401 or a USB port of a computer 450. A siren 
551 may be added to provide loud noise-making capability. An email terminal 530 can be added 
to initiate and receive messages to/from external networks 410 and via a gateway 300. Other 
sensors 620 may be added to detect fire, smoke, heat, water, temperature, vibration, motion, as 
10 well as other measurable events or items. A camera and/or audio terminal 540 may be added to 
enable remote monitoring via a gateway 300. A keyfob 561 may be added to enable wireless 
function control of the security system. This list of devices that can be added is not intended to 
be exhaustive, and other types can also be created and added as well. 

The distributed nature of the security system is shown in the example layout in Figure 4 for a 
15 small house. At each opening in the house, such as windows 702 and doors 701, for which 
monitoring is desired, an intrusion sensor 600 and RFID transponder 100 are mounted. In a 
pattern determined by the layout of the house or building into which the security system is to be 
installed, one or more RFID readers 200 are mounted. Each RFID reader 200 is in wireless 
communications with one or more RFID transponders 100. Each RFID reader 200 is also in 
20 communications with one or more other RFID readers 200, each of which may contain a 

controller function 250, wherein the form of the communications can vary depending upon the 
embodiments of the RFID readers 200. In general, each RFID reader 200 is responsible for the 
RFID transponders 100 in a predetermined read range of each RFID reader 200. As is well 
understood to those skilled in the art, the range of wireless communications is dependent, in part, 
25 upon many environmental factors in addition to the specific design parameters of the RFID 
readers 200 and RFID transponders 100. 

According to US Census Bureau statistics, the median size of one-family houses has ranged from 
1,900 to 2,100 square feet (176 to 195 square meters) in the last ten years, with approximately 
two-thirds under 2,400 square feet (223 square meters). This implies typical rooms in the house 
30 of 13 to 20 square meters, with typical wall lengths in each room ranging from 3 to 6 meters. It is 
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likely in many residential homes that most installed RFID readers 200 will be able to 
communicate with RFID transponders 100 in multiple rooms. Therefore, in many cases with this 
system it will be possible to either install fewer RFID readers 200 than major rooms in a 
building, or to follow the guideline of one RFID reader 200 per major room, creating a system 
5 with excellent spatial antenna diversity as well as redundancy in the event of single component 
failure. 

The RFID reader 200 can be installed in various locations within a house or building. The choice 
of location is at the convenience of the installer or building occupant, and is typically chosen to 
provide good wireless propagation ability. In a residential house example, the RFID reader 200 

10 can be installed in a room, a hallway, in the attic above a room, or in the basement/crawl space 
below a room. When installed in a room or a hallway, the RFID reader 200 may either be (i) 
mounted on a wall / ceiling and obtain its power remotely in a manner similar to prior art motion 
detectors, or (ii) be mounted on or near an outlet and obtain its power locally from the aforesaid 
outlet. The choice of installation location will determine the physical shape and embodiment of 

15 the RFID reader 200, but the primary function will remain the same. 

There are several elements that will typically be common to all devices part of the security 
system. One element, networking, has already been shown in Figures 2 and 3. In a typical 
installation, the most numerous powered device installed will be RFID readers 200. The RFID 
reader 200 is the central element in the security system, and it typically capable of several basic 

20 and optional forms of communications. The first basic form is backscatter modulation 420 
techniques, used to communicate with the RFID transponders 100. The second basic form is 
active RF communications 422, used to communicate with other powered devices within the 
security system such as other RFID readers 200, gateways, etc. In the context of this present 
application, both forms are wireless communications, but active RF communications 422 is 

25 differentiated from backscatter modulation 420 in that (i) backscatter modulation 420 relies on 
an RFID reader 200 to initiate a wireless communications and an RFID transponder 100 can only 
respond with a wireless communications 421 that is based upon or derived from the wireless 
transmissions originated by the RFID reader 200, and (ii) active RF communications is that 
which independently originated from any powered device in the security system using its own 

30 generated carrier frequency independent of any other device. The first optional form of 

communications is power line carrier communications 202 that travels over standard power lines 



13 



RFID-0107 



430. The second optional form of communications is a hardwired connection 431. Each of these 
communications means will be discussed in more detail below. 

A second common element is the controller function 250. Prior art alarm panels typically contain 
a single controller, and all other contacts, motion detectors, etc. are fairly dumb from an 
5 electronics and software perspective. For this reason, the alarm panel must be hidden in the 
house because if the alarm panel were discovered and disabled, all of the intelligence of the 
system would be lost. The controller function 250 of the present invention is distributed through 
most, if not all, of the powered devices in the security system. The controller function 250 is a 
set of software logic that can reside in the processor and memory of a number of different 

10 devices within the security system, including within the RFID reader 200. Figure 5 A shows a 
generalized architecture for any device used in the security system. Elements common to most 
devices will be power 264, a processor 261, memory 266 associated with the processor, and the 
chosen networking 262. If the memory 266 is of an appropriate type and size, the memory 266 
can contain a controller function 250, consisting of both program code 251 and configuration 

1 5 data 252. The program code 25 1 will generally contain both controller function 250 code 

common to all devices as well as code specific to the device type. For example, an RFID reader 
200 will have certain device specific hardware 263 that requires matching code, and a gateway 
300 may have different device specific hardware 263 that requires different matching code. 

When multiple devices are installed in a system, the controller functions 250 in the different 
20 devices become aware of each other, and share configuration data 252 and updated program code 
251. The updated program code 251 can consist if either a later released version of the program 
code 251, or can consist of device specific code or parameters. For example, if a new type of 
device is developed and then installed into an existing system, the older devices in the system 
may require updated program code 251 or parameters in order to effectively manage the new 
25 device. 

Independent of the physical communications layer, each controller function 250 in each device 
can communicate with all other controller functions 250 in all other devices as shown in Figure 
5B. The purpose of replicating the controller function 250 on multiple devices is to provide a 
high level of redundancy throughout the entire security system, and to reduce or eliminate 
30 possible points of failure (whether component failure, power failure, or disablement by an 
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intruder). The controller functions 250 implemented on each device perform substantially the 
same common functions, therefore the chances of system disablement by an intruder are fairly 
low. 

When there are multiple controller functions 250 installed in a single security system, the 
5 controller functions 250 arbitrate among themselves to determine which controller function 250 
shall be the master controller for a given period of time. The preferred arbitration scheme 
consists of a periodic self-check test by each controller function 250, and the present master 
controller may remain the master controller as long as its own periodic self-check is okay and 
reported to the other controller functions 250 in the security system. If the present master 

10 controller fails its self-check test, or has simply failed for any reason or been disabled, and there 
is at least one other controller function 250 whose self-check is okay, the failing master 
controller will abdicate and the other controller function 250 whose self-check is okay will 
assume the master controller role. In the initial case or subsequent cases where multiple 
controller functions 250 (which will be ideally be the usual case) are all okay after periodic self- 

15 check, then the controller functions 250 may elect a master controller from among themselves by 
each choosing a random number from a random number generator, and then selecting the 
controller function 250 with the lowest random number. There are other variations of arbitration 
schemes that are widely known, and any number are equally useful without deducting from the 
inventiveness of permitting multiple controller functions 250 in a single security system, as long 

20 as the result is that in a multi- controller function 250 system, no more than one controller 

function 250 is the master controller at any one time. In a multi- controller function 250 system, 
one controller function 250 is master controller and the remaining controller functions 250 are 
slave controllers, keeping a copy of all parameters, configurations, tables, and status but not 
duplicating the actions of the master controller. 

25 In a system with multiple controller functions 250, the security system can receive updated 

program code 251 and selectively update the controller function 250 in just one of the devices. If 
the single device updates its program code 25 1 and operates successfully, then the program code 
251 can be updated in other devices. If the first device cannot successfully update its program 
code 251 and operate, then the first device can revert to a copy of older program code 251 still 

30 stored in other devices. Because of the distributed nature of the controller functions 250, the 
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security system of the present invention does not suffer the risks of prior art alarm panels which 
had only one controller. 

The controller function 250 typically performs the following major logic activities, although the 
following list is not meant to be limiting: 

5 configuration of the security system whereby each of the other components are identified, 

enrolled, and placed under control of the master controller, 

receipt and interpretation of daily operation commands executed by the homeowner or 
building occupants including commands whereby the system is placed, for example, into 
armed or monitoring mode or disarmed for normal building use, 

10 communications with other controller functions 250, if present, in the system including 

exchange of configuration information and daily operation commands as well as arbitration 
between the controller functions 250 as to which controller function 250 shall be the master 
controller, 

communications with various external networks 410 for purposes such as sending and 
15 receiving messages, picture and audio files, new or updated program code 25 1, commands 

and responses, and similar functions, 

communications with RFID readers 200 and other sensors 620 and devices 550, such as 
passive infrared sensors 570, in the security system including the sending of various 
commands and the receiving of various responses and requests, 

20 processing and interpretation of data received from the RFID readers 200 including data 

regarding the receipt of various signals from the sensors and RFID transponders 100 within 
read range of each RFID reader 200, 

monitoring of each of the sensors, both directly and indirectly, to determine, for example, 
whether a likely intrusion has occurred, whether glass breakage has been detected, or 
25 whether motion has been detected by a microwave- and/or passive infrared-based device, 

deciding, based upon the configuration of the security system and the results of monitoring 
activity conducted by the controller function 250, whether to cause an alert or take another 
event based action, 
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causing an alert, if necessary, by some combination of audible indication such as via a siren 
device 551, or using a gateway 300 to dial through the public switched telephone network 
(PSTN) 403 to deliver a message to an emergency response agency 460, or sending a 
message through one or more commercial mobile radio service (CMRS) 402 operators to an 
5 emergency response agency 460. 

Many homeowners desire monitoring of their security systems by an alarm services company. 
The inventive security system permits monitoring as well as access to various external networks 
410 through a gateway device 300. There is actually not a single gateway 300, but rather a 
family of gateway devices 300, each of which permit access from the security network 400 to 

10 external devices and networks using different protocols and physical connection means. Each 
gateway 300 is configured with appropriate hardware and software that match the external 
network 410 to which access is desired. As shown in Figure 6, examples of external networks 
410 to which access can be provided are private Ethernets 401, CMRS 402, PSTN 403, WiFi 
404, and the Internet 405. This list of external networks 400 is not meant to be limiting, and 

15 appropriate hardware and software can be provided to enable the gateway 300 to access other 
network formats and protocols as well. Private Ethernets 401 are those which might exist only 
within a building or residence, servicing local computer terminals 450. If the gateway 300 is 
connected to a private Ethernet 401, access to the Internet 405 can then be provided through a 
cable modem 440, DSL 441, or other type of broadband network 442. There are too many 

20 suppliers to enumerate here. 

A block diagram of the gateway 300 is shown in Figure 10; it can be seem that the specific 
architecture of the gateway 300 follows the generic device architecture previously shown in 
Figure 5A. The major logic functions, including a controller function 250, are implemented in 
the firmware or software executed by the microprocessor 303 of the gateway 300. The 

25 microprocessor 303 contains non- volatile memory 304 for storing the controller function 250 
firmware or software as well as the configuration of the system. The gateway 300 typically has 
its own power supply 308 and can also contain a backup battery 309, if desired, for use in case of 
loss of normal power. The gateway 300 will typically store the controller function 250 
configuration information in the form of one or more tables in non-volatile memory 304. The 

30 table entries enable the gateway 300 to store the identity of each RFID reader 200 and other 
devices, along with the capabilities of each RFID reader 200 and other device, the identity of 



17 



RFID-0107 

each RFID transponder 100, along with the type of RFID transponder 100 and any associated 
intrusion sensors 600, and the association of various sensors in the system. For example, as 
discussed later, it is advantageous for the controller function 250 to associate particular passive 
infrared sensors 570 with particular RFID readers 200 containing a microwave Doppler motion 
5 function. With respect to each RFID transponder 100, the table entries may further contain radio 
frequency, power level, and modulation technique data. These table entries can enable the 
controller function 250 to command an RFID reader 200 to use a particular combination of radio 
frequency, modulation technique, antenna, and power level for a particular RFID transponder 
100, wherein the combination used can vary when communicating with each separate RFID 
10 reader 200, RFID transponder 100, or other device 551. Furthermore, the tables may contain 
state information, such as the reported status of any battery 1 1 1 included with an RFID 
transponder 100. One embodiment of the gateway 300 can take the form shown in Figure 23B. 

The security system permits the installation of multiple gateways 300 in a single security 
network 400, each of which can interface to the same or different external networks 410. For 
15 example, a second gateway 300 can serve to function as an alternate or backup gateway 300 for 
cases in which the first gateway 300 fails, such as component failure, disablement or destruction 
by an intruder, or loss of power at the outlet where the first gateway 300 is plugged in. 

The gateway 300 will typically communicate with the RFID readers 200 using any of active RF 
communications 422 through an RF interface 305, analog interface 306, and antenna 307, a 

20 power line carrier protocol 202, or hardwire interface 209. There are tradeoffs to consider with 
each form of communications. Active RF communications 422 will require that the gateway 300 
be within RF propagation range of other devices, such as RFID readers 200. In a typical 2,100 
square foot house, this will generally not be a problem, especially given the allowed power limits 
(as discussed below). Power line carrier protocols 202 can extend the range of communications, 

25 but are susceptible to interference on the power line 430 and interruption if the breaker for that 
power circuit "trips". Hardwire communications 209 is the most reliable because it is dedicated; 
however, it entails the cost of installing dedicated wires 431. 

In general, the homeowner or building owner receives maximum benefit of this inventive 
security system by avoiding the installation of additional wires. Since active RF communications 
30 422 will be discussed elsewhere power line communications 202 will be discussed here. Power 
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line carrier 202 protocols allow the sending of data between devices using the existing power 
lines 430 in a building. One of the first protocols for doing this is known as the X-10 protocol. 
However, there are now a number of far more robust protocols in existence. One such protocol is 
known as CEBus (for Consumer Electronics Bus), which was standardized as EIA600. There are 
5 a growing number of other developers of power line carrier 202 protocols such as 

Easyplug/Inari, Itran Communications, nSine, and Intellon. For the inventive security system, the 
primary driver for deciding upon a particular power line carrier protocol is the availability of 
chipsets, reference designs, and related components at high manufacturing volumes and at low 
manufacturing cost. Furthermore, compatibility with other products in the home automation field 

10 would be an additional advantage. If power line carrier communications 202 were desired by a 
homeowner or building owner, the preferred choice would be the standard HomePlug, embodied 
in the Intellon chipset. HomePlug offers sufficient data speeds over standard power lines 430 at a 
reported distance of up to 300 meters. That standard operates using frequencies between 4.3 and 
20.9 MHz, and includes security and encryption protocols to prevent eavesdropping over the 

15 power lines 430 from adjacent houses or buildings. However, the specific choice of which 

protocol to use is at the designer's discretion, and does not subtract from the inventiveness of this 
system. 

For various reasons, it is also possible that a particular building owner will not desire to use 
power line carrier communications 202. For example, the occupants of some buildings may be 
20 required to meet certain levels of commercial or military security that preclude permitting signals 
on power lines 430 that might leak outside of the building. Therefore a form of the gateway 300 
may also be configured to use hardwired connections 43 1 through a hardwire interface 209 to 
one or more RFID readers 200. 

Homeowners and building owners generally desire one or two types of alerts in the event that an 
25 intrusion is detected. First, an audible alert may be desired whereby a loud siren 551 is activated 
both to frighten the intruder and to call attention to the building so that any passers-by may take 
notice of the intruder or any evidence of the intrusion. However, there are also scenarios in 
which the building owner prefers the so called silent alert whereby no audible alert is made so as 
to lull the intruder into believing he has not been discovered and therefore may still be there 
30 when law enforcement personnel arrive. The second type of alert involves messaging an 

emergency response agency 460, indicating the detection of an intrusion and the identity of the 
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building, as shown in Figure 7. The emergency response agency 460 may be public or private, 
depending upon the local customs, and so, for example, may be an alarm services company or 
the city police department. 

The gateway 300 of the inventive system supports the second type of foregoing alert by 
5 including a slot capable of receiving optional modules 310, 311,312, or 313 which provide 
respectively, a modem module, wireless module, WiFi module, or Ethernet module. These 
modules 310 to 313 are preferably in the form of an industry standard PCMCIA or compact flash 
(CF) module 330, thereby allowing the selection of any of a growing variety of modules made by 
various vendors manufactured to these standards. The modem module 310 is used for connection 
10 to a public switched telephone network (PSTN) 403; the wireless module 3 1 1 is used for 

connection to a commercial mobile radio service (CMRS) network 402 such as any of the widely 
available CDMA, TDMA, or GSM-based 2G, 2.5G, or 3G wireless networks. The WiFi module 
3 12 is used for connection to private or public WiFi networks 404; the Ethernet module 3 13 is 
use for connection to private or public Ethernets 401. 

15 Certain building owners will prefer the high security level offered by sending an alert message 
through a CMRS 402 network or WiFi network 404. The use of a CMRS network 402 or WiFi 
network 404 by the gateway 300 overcomes a potential point of failure that occurs if the intruder 
were to cut the telephone wires prior to attempting an intrusion. If the building owner has 
installed at least two gateways 300 in the system, one gateway 300 may have a wireless module 

20 311 installed and a second may have a modem module 310 installed. This provides the inventive 
security system with two separate communication paths for sending alerts to the emergency 
. response agency 460 as shown in Figure 7. By placing different gateways 300 in very different 
location in the building, the building owner significantly decreases the likelihood that an intruder 
can discover and defeat the security system. 

25 The controller function 250, in particular when contained in a gateway 300 with a wireless 
module 31 1 or WiFi module 312, offers an even higher level of security that is particularly 
attractive to marketing the inventive security system to apartment dwellers. Historically, security 
systems of any type have not been sold and installed into apartments for several reasons. 
Apartment dwellers are more transient than homeowners, making it difficult for the dweller or an 

30 alarm services company to recoup an investment in installing a system. Of larger issue, though, 
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is the small size of apartments relative to houses. The smaller size makes it difficult to 
effectively hide the alarm panel of prior art security systems, making it vulnerable to discovery 
and then disconnection or destruction during the pre-alert period. The pre-alert period of any 
security system is the time allowed by the alarm panel for the normal homeowner to enter the 
5 home and disarm the system by entering an appropriate code or password into a keypad. This 
pre-alert time is often set to 30 seconds to allow for the fumbling of keys, the carrying of 
groceries, the removal of gloves, etc. In an apartment scenario, 30 seconds is a relatively long 
time in which an intruder can search the apartment seeking the alarm panel and then preventing 
alert. Therefore, security systems have not been considered a viable option for most apartments. 
10 Yet, at least 35% of the households in the U.S. live in apartments and their security needs are not 
less important than those of homeowners. 

The inventive security system includes an additional remote monitoring function in the controller 
function 250, which can be selectively enabled at the discretion of the system user, typically for 
use with the wireless module 31 1 or WiFi module 312, but also available for use with the 

15 Ethernet module 313. Beginning in 2001, most CMRS 402 networks based upon CDMA, 

TDMA, or GSM have supported a feature known as two-way Short Messaging Service (SMS). 
Available under many brand names, SMS is a connectionless service that enables the sending of 
short text messages between a combination of wireless and/or wired entities. Public WiFi 
networks 404 and Ethernet networks, of course, have a similar messaging capability. The 

20 controller function 250 includes a capability whereby the controller function 250 can send a 

message, via the wireless module 3 1 1 or WiFi module 312 and using the SMS feature of CMRS 
402 networks or messaging feature of WiFi networks 404, to a designated remote processor at an 
alarm services company, or other designated location, at the time that a pre-alert period begins 
and again at the time that the security system has been disabled by the normal user, such as the 

25 apartment dweller, by entering the normal disarm code. Furthermore, the controller function 250 
can send a different message, via the wireless module 3 1 1 or WiFi module 312 and using the 
SMS feature of CMRS networks 402 or messaging feature of WiFi networks 404, to the same 
designated processor if the normal user enters an abnormal disarm code that signals distress, 
such as when, for example, an intruder has forced entry by following the apartment dweller 

30 home and using a weapon to force the apartment dweller to enter her apartment with the intruder 
and disarm the security system. 
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In logic flow format, the remote monitoring function operates as shown in Figure 13 and 
described in more detail below, assuming that the function has been enabled by the user: 

- An intrusion is detected in the building, such as the apartment, 

- the controller function 250 begins a pre-alert period, 

5 - the controller function 250 sends a message via the wireless module 3 1 1 or WiFi module 

3 12 to a designated remote processor that may be remotely monitoring security systems, 
whereby the message indicates the identity of the security system and the transition to 
pre-alert state, 

- the said designated remote processor begins a timer (for example 30 seconds or any 
10 reasonable period allowing for an adequate pre-alert time), 

- if the person causing the intrusion is a normal user under normal circumstances, the 
normal user will enter the normal disarm code, 

• the controller function 250 ends the pre-alert period, and enters a disarmed state, 

• the controller function 250 sends a message via the wireless module 3 1 1 or WiFi 

15 module 3 12 to the said designated remote processor, whereby the message indicates 

the identity of the security system and the transition to disarm state, 

- if the person causing the intrusion is an intruder who does not know the disarm code 
and/or disables and/or destroys the device containing the controller function 250 of the 
security system, 

20 • the timer at the said designated remote processor reaches the maximum time limit (30 

seconds in this example) without receiving a message from the controller function 
250 indicating the transition to disarm state, 

• the said designated remote processor may remotely cause an alert indicating that a 
probable intrusion has taken place at the location associated with the identity of the 

25 security system, 

- if the person causing the intrusion is an authorized user under distressed circumstances 
(i.e. gun to back), the authorized user will enter an abnormal disarm code indicating 
distress, 
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• the controller function 250 sends a message via the wireless module 3 1 1 or WiFi 
module 312 to the said designated remote processor, whereby the message indicates 
the identity of the security system and the entering of an abnormal disarm code 
indicating distress, 

5 • the said designated remote processor may remotely cause an alert indicating that an 

intrusion has taken place at the location associated with the identity of the security 
system and that the authorized user is present at the location and under distress. 

As can be readily seen, this inventive remote monitoring function now enables the installation of 
this inventive security system into apartments without the historical risk that the system can be 
10 rendered useless by the discovery and disablement or destruction by the intruder. With this 

function enabled, even if the intruder were to disable or destroy the system, a remote alert could 
still be signaled because a message indicating a transition to disarm state would not be sent, and 
a timer would automatically conclude remotely at the designated processor. This function is 
obviously not limited to just apartments and could be used for any building. 

1 5 With the wireless module 311, WiFi module 3 12, or Ethernet module 313 installed, a gateway 
300 can also be configured to send either an SMS-based message through the CMRS 402 or an 
email message through a WiFi network 404 or Ethernet network 401 to the Internet 405 to any 
email address based upon selected user events. For example, an individual away from home 
during the day may want a message sent to his pager, wireless phone, or office email on 

20 computer 450 if the inventive security system is disarmed at any point during the day when no 
one is supposed to be at home. Alternately, a parent may want a message sent when a child has 
retuned home from school and disarmed the security system. Perhaps a homeowner has provided 
a temporary disarm code to a service company scheduled to work in the home, and the 
homeowner wants to receive a message when the work personnel have arrived and entered the 

25 home. By assigning different codes to different family members and/or work personnel, the 
owner of the security system can discriminate among the persons authorized to disarm the 
system. Any message sent, as described herein, can contain an indication identifying the code 
and/or the person that entered the disarm code. The disarm code itself is not sent for the obvious 
security reasons, just an identifier associated with the code. 
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With the modem module 310, wireless module 311, WiFi module 312, or Ethernet module 313 
installed, the gateway 300 can send or receive updated software, parameters, configuration, or 
remote commands, as well as distribute these updated software, parameters, configuration, or 
remote commands to other controller functions 250 embedded in other devices such as RFID 
5 readers 200. For example, once the security system has been configured, a copy of the 

configuration, including all of the table entries, can be sent to a remote processor for both backup 
and as an aid to responding to any reported emergency. If, for any reason, all of the controller 
functions 250 within the security system ever experienced a catastrophic failure whereby its 
configuration were ever lost, the copy of the configuration stored at the remote processor could 

10 be downloaded to a restarted or replacement controller function 250. Certain parameters, such as 
those used in glass breakage detection, can be downloaded to the controller function 250 and 
then propagated, in this example, to the appropriate glass breakage detection functions that may 
be contained within the system. Therefore, for example, if a homeowner were experiencing an 
unusual number of false alarm indications from a glass breakage detection function, remote 

1 5 technical personnel could remotely make adjustments in certain parameters and then download 
these said new parameters to the controller function 250. Additionally, the operating parameters 
for new devices can also be downloaded to the controller function 250. For example, if a 
homeowner added a new device to the security system several years after initial installation, the 
parameters for this new type of device might not exist in the controller function 250. The 

20 security system could obtain the parameters associated with the new device from a site 
designated by the manufacturer. 

The controller function 250 can also report periodic status and/or operating problems detected by 
the system to the emergency response agency 460 or to the manufacturer of the system. One 
example of the usefulness of this function is that reports of usage statistics, status, and/or 
25 problems can be generated by an emergency response agency 460 and a copy be provided to the 
customer as part of his monthly bill. Furthermore, the usage statistics of similarly situated 
customers can be compared and analyzed for any useful patterns. 

The RFID reader 200 is typically designed to be inexpensively manufactured since in each 
installed security system, there may be approximately one RFID reader 200 for each major room 
30 to be monitored. From a physical form factor perspective, the RFID reader 200 of the present 
invention can be made in several embodiments, where the form of the embodiment is partially 
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dependent upon whether the RFID reader 200 is being used with existing security systems of the 
prior art or whether the RFID reader 200 is being used in a new self-install system. Embodiments 
particularly useful in self-installed security systems, wherein the RFID reader 200, or other 
devices 550 such as for example gateways 300, obtains its power from a nearby standard AC 
5 power outlet 720 shall hereinafter be termed "self-install embodiments". In this embodiment, 
shown in Figure 17, the packaging of the RFID reader 200, or other devices 550 such as for 
example gateways 300, may have the plug integrated into the package such that the RFID reader 
200 or other device 550 is plugged into a standard outlet 720 without any associated extension 
cords, power strips, or the like. 

10 Second embodiments particularly useful with existing security systems of the prior art, wherein 
the RFID reader 200 receives power directly or indirectly via its connection to the power supply 
of an alarm panel such as those of prior art security systems, shall hereinafter be termed "existing 
embodiments". In this embodiment, the received power will typically be 12 VDC, which is also 
commonly available to prior art motion detectors and other sensors. Figures 14 and 15 show the 

1 5 RFID reader 200 as it can be connected, typically via hardwire, to controllers associated with 

prior art alarm panels. Existing embodiments of the RFID reader 200 will generally not include a 
controller function 250. Rather, the controller function 250 may be implemented using a 
dedicated processor on a panel interface module 350 as shown in Figure 14 or it may be 
incorporated into the processor of a controller 351 associated with the alarm panel of prior art 

20 security systems. In existing embodiments, the panel interface module 350 and associated RFID 
readers 200 derive their power from the power supply and/or lead acid battery of the prior art 
alarm panel. 

From a mechanical standpoint, the self-install embodiment of the RFID reader 200, as well as 
other self-install devices 550 for use in the inventive security system, such as gateways 300, 

25 sirens 551 , and other devices 550, is provided with threaded screw holes on the rear of the 
packaging, as shown in Figure 19A. If desired by the user installing the system of the present 
invention, holes can be drilled into a plate 722, which may be an existing outlet cover (for 
example, if the user has stylized outlet covers that he wishes to preserve) whereby the holes are 
of the size and location that match the holes on the rear of the packaging for the RFID reader 200 

30 or the gateway 300, for example. Alternately, the user can employ a plate in the shape of an 
extended outlet cover 721 shown in Figure 19B which provides additional mechanical support 
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through the use of additional screw attachment points. Then, as shown in Figures 19A and 19B, 
the plate 722 or 721 can be first attached to the rear of the RFID reader 200 or other device 
packaging, using the screws 724 shown, and if necessary, spacers or washers. The RFID reader 
200 or other example devices 550 can be plugged into the outlet 720, whereby the plate 722 or 
5 721 is in alignment with the sockets of the outlet 720. Finally, an attachment screw 723 can be 
used to attach the plate 722 or 721 to the socket assembly of the outlet 720. This combination of 
screws provides positive mechanical attachment whereby neither the RFID reader 200 or other 
example devices can accidentally be jostled or bumped out of the outlet 720. Furthermore, the 
presence of the attachment screw 723 will slow down any attempt to rapidly unplug the RFID 
10 reader 200 or other example devices 550. Existing embodiments of the RFID reader 200 are not 
mounted to outlets 720, but rather are mounted in similar fashion to prior art motion detectors. 

Figure 9 shows a block diagram of the RFID reader 200. Blocks shown in solid lines are 
typically included in each embodiment of an RFID reader 200. Blocks shown in dashed lines 
may or may not be included in a particular embodiment, depending upon the integration wishes 

15 of the designer. Generally, the RFID reader 200 will include at a minimum a microprocessor 203 
controlling transmission and receive functions through an RF interface 204 chipset, an analog 
interface 205, and antenna 206. The microprocessor 203, RF interface 204, and analog interface 
205 may be incorporated as a single chipset or discretely separated. While Figure 9 shows only a 
single antenna 206 for simplicity, as will be discussed later it may be advantageous for the RFID 

20 reader 206 to contain more than one antenna 206 to provide increased directivity. When more 

than one antenna 206 is present, the analog circuits 205 will typically enable the switching of the 
RF interface 204 between the multiple antenna elements 206. 

If the RFID reader 200 is being used with an alarm panel of a prior art security system, typically 
described as a retrofit application, then this existing embodiment of the RFID reader 200 may 

25 only support limited functions such as only backscatter modulation if the RFID reader 200 will 
only be in wireless communications with RFID transponders 100 and not with any other devices 
550. In this case, the processor 203 and memory 204 may not be present if the controller 
functions 250 are incorporated into the panel interface module 350 or controller 351 of a prior art 
alarm panel. For similar reasons, the existing embodiment of the RFID reader 200 may not have 

30 a power supply 207 since power can be derived directly or indirectly from the prior art alarm 
panel. 
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If the configuration of the RFID reader 200 includes only a single antenna, it can take the form 
shown in Figure 17 with one PC motherboard containing most of the components, with a slot for 
accepting a daughter card in the form factor of an industry standard PCMCIA or compact flash 
(CF) module 220. These module sizes are preferred because the growing variety of modules 
5 made by various vendors and manufactured to these standards are leading to rapidly declining 
component and manufacturing costs for chipsets, discrete resistors, capacitors, inductors, 
antennas, packaging, and the like. Furthermore, it may ease the process of FCC equipment 
certification to make the intentional radiating portions of the RFID reader 200 into a mechanical 
package separate from the remaining circuits. It is not a requirement of this present invention that 

10 the RFID reader 200 be constructed in these two parts as shown in Figure 1 7 (motherboard plus 
daughter board); rather it is one possible choice because of the opportunity to lower development 
and manufacturing costs. It is likely that variations of the RFID reader 200 can also be produced 
with all components integrated into a single package, perhaps even smaller in size, without 
detracting from the present inventive architecture and combination of functions, circuits, and 

15 logic. For example, as will be discussed later, when multiple antennas 206 are used the 
packaging is generally integrated. 

Other elements of Figure 9 may be incorporated depending upon chosen embodiment. If the 
RFID reader 200 is a self-install embodiment, then the RFID reader 200 includes a local power 
supply 207. If battery backup is desired, the packaging of the RFID reader 200 also permits the 

20 installation of a battery 208 for backup purposes in case normal power supply 207 is interrupted. 
When the RFID reader 200 is used in a self-install embodiment, the RFID reader 200 will 
generally also include a controller function 250, therefore the microprocessor 203 will also 
require sufficient memory 211 for program and data storage. The lowest cost form of the self- 
install embodiment will use active RF communications 422 between multiple RFID readers 200 

25 and other devices 550. However, the RFID reader 200 may also include a power line interface 
202 or a hardwire interface 209 to provide communications capability over wires, as discussed 
elsewhere. 

The RFID reader 200 will typically communicate with the RFID transponders 100 using 
frequencies in one or more of following unlicensed frequency bands: 902 to 928 MHz, 2435 to 
30 2465 MHz, 2400 to 2483 MHz, or 5725 to 5850 MHz. These bands permit the use of unlicensed 
secondary transmitters, and are part of the bands that have become popular for the development 
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of cordless phones and wireless LAN networks, thereby leading to the wide availability of many 
low cost components that are required for this invention, such as the RF interface 204 chips, 
analog interface 205 components, and antennas 206. There are 3 different FCC rule sets 
applicable to the present invention, which will be discussed briefly. 

5 Transmissions regulated by FCC rules 47 CFR 15.245 permit field strengths of up to 500 mV/m 
at 3 meters (measured using an average detector function; the peak emission limit may be up to 
20 dB higher). This implies an averaged transmission power of 75 mW and a peak transmission 
power of up to 7.5 Watts. Furthermore, transmissions under these do not suffer the same duty 
cycle constraints as existing wireless security system transmitters operating under 47 CFR 
10 15.231(a). However, in order to use the rules of 47 CFR 15.245, the RFID reader 200 must 
operate as a field disturbance sensor, which it does. Existing wireless security system 
transmitters are not field disturbance sensors. 

Transmissions regulated by FCC rules 47 CFR 15.247 permit frequency hopping (FHSS) or 
digital modulation (DM) systems at transmission powers up to 1 Watt into a 6 dBi antenna, 
15 which results in a permitted 4 Watt directional transmission. In order for a FHSS device to take 
advantage of the full permitted power, the FHSS device must frequency hop at least once every 
400 milliseconds. 

Transmissions regulated by FCC rules 47 CFR 15.249 permit field strengths of up to 50 mV/m at 
3 meters (measured using an average detector function; the peak emission limit may be up to 20 
20 dB higher). This implies an averaged transmission power of 750 jiW and a peak transmission 
power of up to 75 mW. Unlike 47 CFR 15.247, rule section 47 CFR 15.249 does not specify 
modulation type or frequency hopping. 

Most other products using these unlicensed bands are other transient transmitters operating under 
47 CFR 15.247 and 47 CFR 15.249, and so even though it may seem that many products are 

25 available and in use in these bands, in reality there remains a lot of available space in the band at 
any one instant in time, especially in residential homes. Most transmitters operating under 47 
CFR 15.247 are frequency hopping systems whereby the given spectrum is divided into channels 
of a specified bandwidth, and each transmitter can occupy a given channel for only 400 
milliseconds. Therefore, even if interference occurs, the time period of the interference is brief. 

30 In most cases, the RFID readers 200 can operate without incurring interference or certainly 
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without significant interference. In residential homes, the most frequent product user of these 
bands are cordless telephones, for which there are no standards. Each phone manufacturer uses 
its own modulation and protocol format. For data devices, there are several well known standards 
that use the 2400 to 2483 band, such as 802.1 1, 802.1 lb (WiFi), Bluetooth, ZigBee (HomeRF- 
5 lite), and IEEE 802. 1 5.4, among others. 

The present invention has a substantial advantage of the aforementioned products in that the 
RFID readers 200, gateways 300, and other devices 550 of the security system are fixed. Other 
products such as cordless phones and various data devices usually have at least one handheld, 
usually battery powered, component. The FCC's Maximum Permitted Exposure (MPE) 

10 guidelines, described in OET 65, generally cause manufacturers to limit transmission power of 
handheld devices to 100 mW or less. Since most wireless links are symmetrical, once the 
handheld device (such as the cordless phone) is power limited, any fixed unit (such as the 
cordless base unit) is also limited in power to match the handheld device. Given that the RFID 
reader 200, gateway 300, and other devices 550 of the security system are not handheld, they can 

1 5 use the full power permitted by the FCC rules and still meet the MPE guidelines. 

As discussed earlier, the preferred means of communications by and between RFID readers 200, 
gateways 300, and other devices is active RF communications 422. The invention is not limiting, 
and modulation formats and protocols using either FHSS or DM can be employed. As one 
example, the active RF communications 422 can use Gaussian Frequency Shift Keyed (GFSK) 

20 modulation with FHSS. This particular modulation format has already been used quite 

successfully and inexpensively for Bluetooth, 802.1 1, and other data systems to achieve raw data 
rates on the order of 1 Mbps. In order to take maximum advantage of the permitted power limits 
in, for example, the 2400 to 2483 MHz band, if a FHSS protocol is chosen, GFSK or otherwise, 
at least 75 hopping channels should be used and if a DM protocol is chosen, a minimum 6 dB 

25 bandwidth of 500 KHz should be used. Any designer of a security system under this invention 
can take advantage of the fixed nature of the RFID readers 200, gateways 300, and other devices 
550 as well as the relatively low data rate requirements to select a modulation format and 
protocol with high link margins. Most other products in these bands have at least one mobile 
component and high data rates are required. Therefore, in spite of the presence of other products, 

30 the active RF communications 422 used in the security system should achieve higher reliability 
and range, and lower susceptibility to interference than other collocated products. 
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When using active RF communications 422, RFID readers 200, gateways 300, and other devices 
550 function as a network of devices. A message originating on one device may pass through 
intermediate devices before terminating on the destination devices, as shown in Figures 2C and 
8. The RFID readers 200, gateways 300, and other devices 550 determine their own network 
5 topology based upon the ability of each device to reliably receive the transmissions from other 
devices. As will be discussed later, the antennas 206 used in these devices may be directional, 
and therefore it is not always certain that each device can directly transmit to and receive from 
every other device. However, given the power limits and expected distribution of devices in 
typical homes and buildings, it can be generally expected that each device can communicate with 
10 at least one other device, and that the devices can then form for themselves a network that 

enables the routing of a message from any one device to any other device. Networking protocols 
are well understood in the art and therefore not covered here. The devices described herein 
typically will use the unique originating and destination address of each device in the header of 
each message sent in routing messages within the network. 

15 While the RFID readers 200, gateways 300, and other devices 550 use 47 CFR 15.247 rules for 
its active RF communications 422, the RFID readers 200 can use both 47 CFR 15.245 and 47 
CFR 15.247 rules for its wireless communications 420 with the RFID transponders 100. Thus, 
the RFID readers 200 can communicate to the RFID transponders 100 using one protocol, at a 
maximum power of 4 W for any length of time, and then switch to a second protocol, if desired, 

20 at a maximum power of 7.5 W to obtain a response 421 from an RFID transponder 100. While 
the RFID reader 200 can transmit at 7.5 W for only 1 ms under the 47 CFR 15.245, that time 
period is more than enough to obtain tens or hundreds of bits of data from an RFID transponder 
100. The extra permitted 2.7 dB of power under 47 CFR 15.245 is useful for increasing the read 
range of the RFID reader 200. In a related function, the RFID reader 200 can use the longer 

25 transmission times at 4 W to deliver power to the RFID transponders 1 00, as described 
elsewhere, and reserve the brief bursts at 7.5 W only for data transfer. 

As an alternative to active RF communications 422, the RFID readers 200, gateways 300, and 
other devices 550 can use a power line carrier protocol 202, matching of course, the chipsets and 
protocols discussed for the gateway 300. Either means of communications permits the 
30 homeowner or building owner to install the RFID readers 200 by simply plugging each into an 
outlet 720 in approximately each major room. The RFID readers 200, gateways 300, and other 
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devices 550 can then use the method disclosed later to associate themselves with each other and 
begin communications without the need to install any new wires. However, as also discussed in 
the foregoing, there may be some users with higher security requirements that do not permit the 
use of radio spectrum or power lines 430 that may be shared with users outside of the building, 
5 and therefore the design permits the use of hardwired connections 209 between the gateways 
300, RFID readers 200, and other devices 550. 

Each RFID reader 200 communicates with one or more RFID transponders 100 typically using 
modulated backscatter techniques. These techniques are very well understood by those skilled in 
the art, and have been well discussed in a plethora of literature including patent specifications, 

10 trade publications, marketing materials, and the like. For example, the reader is directed to RFID 
Handbook Radio-Frequency Identification: Fundamentals And Applications \ by Klaus 
Finkenzeller, published by John Wiley, 1999. Patent 6,147,605, issued to Vega et al, provides 
additional material on the design and theory of modulated backscatter techniques. Patent 
application 10/072,984, by Shanks et al, also provides material on the design and theory of 

15 modulated backscatter techniques. Therefore, this same material is not covered here. Presently, a 
number of companies produce miniaturized chipsets, components, and antennas for RFID 
readers and transponders. Many of these chipsets, though designed for the 13.56 MHz band, are 
applicable and/or will be available in the higher bands such as those discussed here. For 
example, Hitachi has recently announced the manufacture of its mu-chip, which is a 2.4 GHz 

20 RFID transponder measuring only 0.4 mm square. The most important point here is that the wide 
availability of parts permits the designer many options in choosing the specific design 
parameters of the RFID reader 200 and RFID transponder 100 and therefore the innovative 
nature of this invention is not limited to any specific circuit design implementing the wireless 
link 420 and 421 between the RFID reader 200 and RFID transponder 100. 

25 The extensive literature on RFID techniques and the wide availability of parts does not detract 
from the innovative application and combination of these techniques and parts to the present 
invention. Most applications of RFID have been applied to mobile people, animals, or things that 
must be authorized, tracked, counted, or billed. No one has previously considered the novel 
application of low cost RFID components to solve the problem of monitoring fixed assets such 

30 as the windows 702, doors 701, and other sensors that comprise the openings of buildings. All 
present transmitters constructed for prior art wireless security systems are several times more 
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expensive than the RFID-based design of the present invention because of the additional 
components required for active transmission. Furthermore, no one has considered the use of 
multiple, distributed low cost RFID readers 200 with overlapping coverage so that a building's 
security is not dependent on a single, vulnerable, and historically unreliable central transceiver. 

5 There are several examples of the advantages that the present RFID approach offers versus prior 
art wireless security systems. Present wireless security systems limit status reporting by 
transmitters to times even longer than the FCC restriction of once per hour in order to conserve 
the battery in the transmitter. The RFID approach does not have the same battery limitation 
because of the modulated backscatter design. Prior art wireless security systems are subject to 

10 both false positive and false negatives indications because centrally located transceivers have 

difficulty distinguishing noise from real signals. The central transceiver has little control over the 
time of transmission by a transmitter and therefore must evaluate every signal, whether noise, 
interference, or real transmission. This is made more difficult because the prior art central 
transceivers are not always located centrally in the house. Professional installers generally hide 

1 5 these central transceivers in a closet or similar to prevent an intruder from easily spotting the 

central transceivers and disabling it. Each wall or door through which signals must pass to reach 
a central transceiver can cause of loss of up to 10 dB in signal power. In contrast, the RFID 
approach places all of the transmission control in the master controller and RFID reader 200. The 
RFID reader 200 only looks for a reflected response 421 during a read 420. Therefore the RFID 

20 reader 200 can be simpler in design. 

Some centralized transceivers attempt to use diversity antennas to improve their reliability; 
however, these antennas are separated only by the width of the packaging, which is frequently 
much less than one wavelength of the chosen frequency (i.e. 87 cm at 345 MHz and 69 cm at 
433 MHz). As is well known to those skilled in the art of wireless, spatial diversity of antennas 

25 works best when the antennas are separated by more than one wavelength at the chosen 

frequency. With the present invention, RFID readers 200 are separated into multiple rooms, 
creating excellent spatial diversity and the ability to overcome environmental affects such as 
multipath and signal blockage. Multipath and signal blockage are effects of the RF path between 
any transmitter and receiver. Most cellular systems use diversity antennas separated by multiple 

30 wavelengths to help overcome the effects of multipath and signal blockage. Under the present 
invention, in most installations there will be multiple RFID readers 200 in a building. Therefore 
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will therefore be an independent RF path between each RFID reader 200 and each RFID 
transponder 100. The master controller sequences transmissions from the RFID readers 200 so 
that only one RFID reader 200 is transmitting at a time. Besides reducing the potential for 
interference, this allows the other RFID readers 200 to listen to both the transmitting RFID 
5 reader 200 and the subsequent response from the RFID transponders 100. If the RF path between 
the transmitting RFID reader 200 and the RFID transponder 100 is subject to some form of 
multipath or signal blockage, it is possible and even highly probable that one of the remaining 
RFID readers 200 are capable of detecting and interpreting the signal. If the transmitting RFID 
reader 200 is having trouble receiving an adequate response from a particular RFID transponder 
10 100, the master controller will then poll the remaining RFID readers 200 to determine whether 
the response was received by any of them. 

One major design advantage of the present invention versus all other applications of RFID is the 
fixed relationship between each RFID reader 200 and the RFID transponders 100. While RFID 
readers 200 for other applications must include the complexity to deal with many simultaneous 
1 5 tags in the read zone, tags moving rapidly, or tags only briefly in the read zone, the present 
invention can take advantage of controlled static relationship in the following ways. 

While there may be multiple RFID transponders 100 in the read zone of each RFID reader 
200, the RFID reader 200 can poll each RFID transponder 100 individually, preventing 
collisions or interference. In addition, because each RFID transponder 100 is responding 
20 individually, the RFID reader 200 can use the expected response bit sequence to improve the 

receive processing gain. A specific RFID transponder 100 is responding at a specific time, 
and at least a portion of the response 421 will contain bits in a predetermined sequence. 

Because the RFID transponders 100 are fixed, the RFID reader 200 can use longer 
integration times in its signal processing to increase the reliability of the read signal, 
25 permitting successful reading at longer distances and lower power when compared with 

RFID applications with mobile tags. 

Furthermore, the RFID reader 200 can make changes in specific frequency while remaining 
within the specified unlicensed frequency band, in an attempt to find, for each RFID 
transponder 100, an optimal center frequency, given the manufacturing tolerances of the 
30 components in each RFID transponder 1 00 and any environment effects that may be creating 
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more absorption or reflection at a particular frequency. In a similar manner, the RFID reader 
200 can learn the center frequencies of the marking and spacing bits modulated by each 
RFID transponder 100. While these center frequencies may be nominally known and 
designed into the RFID transponder 100, there is likely a significant probability that the 
5 manufacturing process will result in a variation of actual modulation frequencies. By 

matching its demodulation process to each RFID transponder 100, the RFID reader 200 can 
improve its signal processing margin. 

Because the multiple RFID readers 200 are controlled from a single master controller, the 
controller function 250 can sequence the RFID readers 200 in time so that the RFID readers 
1 0 200 do not interfere with each other. 

Because there will typically be multiple RFID readers 200 installed in each home, apartment, 
or other building, the controller function 250 can use the excellent spatial diversity created by 
the distributed nature of the RFID readers 200 to increase and improve the reliability of each 
read. That is, one RFID reader 200 can initiate the transmission sequence 420, but multiple 
15 RFID readers 200 can tune and read the response 421 from the RFID transponder 100. Thus 

the multiple RFID readers 200 can operate as a network of receivers to demodulate and 
interpret the response 421 from the RFID transponder 100. 

Because the RFID transponders 100 are typically static, and because the events (such as 
intrusion) that affect the status of the sensors connected to RFID transponders 100 are 
20 relatively slow compared to the speed of electronics in the RFID readers 200, the RFID 

readers 200 have the opportunity to pick and choose moments of low quiescent interference 
from other products in which to perform its reads with maximum signal to noise ratio 
potential - all without missing the events themselves. 

Because the path lengths and path loss from each RFID transponder 100 to the RFID reader 
25 200 are relatively static, the RFID reader 200 can use different power levels when 

communicating with each RFID transponder 100. Lower path losses require lower power to 
communicate; conversely the RFID reader 200 can step up the power, within the specified 
limits of the FCC rules, to compensate for higher path losses. The RFID reader 200 can 
determine the lowest power level to use for each RFID transponder 100 by sequentially 
30 stepping down its transmit power 420 on successive reads until no return signal 421 can be 
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detected. Then the power level can be increased one or two incremental levels. This 
determined level can then be used for successive reads. This use of the lowest necessary 
power level for each RFID transponder 100 can help reduce the possibility of interference 
while ensuring that each RFID transponder 100 can always be read. 

5 Finally, for the same static relationship reasons, the master controller and RFID readers 200 

can determine and store the typical characteristics of transmission between each RFID 
transponder 100 and each RFID reader 200 (such as signal power, signal to noise ratio, turn 
on time, modulation bit time, etc.), and determine from any change in the characteristics of 
transmission whether a potential problem exists. Thus, the RFID reader 200 can immediately 
10 detect attempts to tamper with the RFID transponder 100, such as partial or full shielding, 
deformation, destruction, or removal. 

By taking advantage of the foregoing techniques, the RFID reader 200 of the present invention 
has a demonstrated wireless range of up to 30 meters when communicating with the RFID 
transponders 1 00, depending upon the building construction materials, placement of the RFID 

1 5 reader 200 in the room, and the furniture and other materials in the room which may have certain 
reflective or absorptive properties. This range is more than sufficient for the majority of homes 
and other buildings in the target market of the present security system, whereby the system can 
be implemented in a ratio of approximately one RFID reader 200 per major room (i.e. a hallway 
or foyer is not considered a major room for the purposes of the present discussion, but a living 

20 room or bedroom is a major room). 

The RFID reader 200 is available with several options that increase both the level of security and 
functionality in the inventive security system. One option enhances the RFID reader 200 to 
include an acoustic transducer 210 capable of both receiving and emitting sound waves that 
enables a glass breakage detection capability in the RFID reader 200. Glass breakage sensors 

25 have been widely available for years for both wired and wireless prior art security systems. 

However, they are available only as standalone sensors selling for $30 to $50 or more. Of course, 
in a hardwired system, there is also the additional labor cost of installing separate wires from the 
alarm panel to the sensor. The cost of the sensors generally limits their use to just a few rooms in 
a house or other building. The cost, of course, is due to the need for circuits and processors 

30 dedicated to just analyzing the sound waves. 
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Since the RFID reader 200 already contains a power supply 207, a processor 203, and a 
controller function 250, the only incremental cost of adding the glass breakage detection 
capability is the addition of the acoustic transducer 210 (shown in Figures 9 and 18 A). With the 
addition of this option, glass breakage detection can be available in every room in which an 
5 RFID reader 200 has been installed. The acoustic transducer 210 preferably supports both the 
reception of sounds waves and the emission of sound wave such that the acoustic transducer 210 
can also be used for other functions beyond just glass breakage detection, such as two-way 
audio, the sounding of tones and alerts, voice recognition, and voice response (i.e. spoken word 
responses to commands). While shown as a single block in Figures 9 and 18 A, the acoustic 
10 transducer 210 can be implemented with a single combined component or with a separate input 
transducer (i.e. microphone) and output transducer (i.e. speaker). 

Glass breakage detection is performed by analyzing received sound waves to look for certain 
sound patterns distinct in the breaking of glass. These include certain high frequency sounds that 
occur during the impact and breaking of the glass and low frequencies that occur as a result of 
15 the glass flexing from the impact. The sound wave analysis can be performed by any number of 
widely known signal processing techniques that permit the filtering of received signals and 
determination of signal peaks at various frequencies over time. 

One advantage of the present invention over prior art standalone glass breakage sensors is the 
ability to adjust parameters in the field. Because glass breakage sensors largely rely on the 

20 receipt of audio frequencies, they are susceptible to false alarms from anything that generates 
sounds at the right combination of audio frequencies. Therefore, there is sometimes a 
requirement that each glass breakage sensor be adjusted after installation to minimize the 
possibility of false alarms. In some cases, no adjustment is possible in prior art glass breakage 
detection devices because algorithms are permanently stored in firmware at the time of 

25 manufacture. Because the glass breakage detection of the present invention is performed by the 
RFID readers 200, which include or are in communication with a controller function 250, the 
controller function 250 can alter or adjust parameters used by the RFID reader 200 in glass 
breakage detection. For example, the controller function 250 can contain tables of parameters, 
each of which applies to different building construction materials or window types. The user can 

30 select the appropriate table entry during system configuration, or select another table entry later 
after experience has been gained with the installed security system. Furthermore, if a gateway 
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300 has any of the modules 310 to 313, the controller function 250 can contact an appropriate 
database via a gateway 300 that is, for example, managed by the manufacturer of the security 
system to obtain updated parameters. There is, therefore, significant advantage to this 
implementation of glass breakage detection, both in the cost of device manufacture and in the 
5 ability to make adjustments to the processing algorithms used to analyze the sound waves. 

The addition of the acoustic transducer 210, with both sounds input and output capability, to the 
RFID reader 200 for the glass breakage option also allows the RFID reader 200 to be used by an 
emergency response agency 460 as a distributed microphone to listen into the activities of an 
intruder. Rather than analyzing the sound waves, the sound waves can be digitized and send to 

10 the gateway 300, and then by the gateway 300 to the emergency response agency 460. After the 
gateway 300 has sent an alert message to the emergency response agency 460, any of the 
installed modules 310 to 313 can be available for use in an audio link. This two-way audio 
capability through the acoustic transducer 210 can be useful for more than just listening by an 
emergency response agency 460. Parents who are not home can listen into the activities of 

15 children who might be home. Similarly, a caregiver can use the two-way audio to communicate 
with an elderly person who might be living alone. 

In a similar manner, the RFID reader 200 can contain optional algorithms for the sensing of 
motion in the room. Like glass breakage sensors, prior art motion sensors are widely available as 
standalone devices. Prior art motion sensors suffer from the same disadvantages cited for 

20 standalone glass breakage sensors, that is they are standalone devices requiring dedicated 

processors, circuits, and microwave generators. However, the RFID reader 200 already contains 
all of hardware components necessary for generating and receiving the radio wave frequencies 
commonly using in detecting motion; therefore the RFID reader 200 only requires the addition of 
algorithms to process the signals for motion in addition to performing its reading of the RFID 

25 transponders 100. Different algorithms are available for motion detection at microwave 

frequencies. One such algorithm is Doppler analysis. It is a well known physical phenomenon 
that objects moving with respect to a transmitter cause a reflection with a shift in the frequency 
of the reflected wave. While the shift is not large relative to the carrier frequency, it is easily 
detectable. Therefore, the RFID reader 200 can perform as a Doppler radar by the rapid sending 

30 and receiving of radio pulses, with the subsequent measurement of the reflected pulse relative to 
the transmitted pulse. People and animals walking at normal speeds will typically generate 
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Doppler shifts of 5 Hz to 100 Hz, depending on the speed and direction of movement relative to 
the RFID reader 200 antenna 206. The implementation of this algorithm to detect the Doppler 
shift can be, at the discretion of the designer, be implemented with a detection circuit or by 
performing signal analysis using the processor of the RFID reader 200. In either case, the object 
5 of the implementation is to discriminate any change in frequency of the return signal relative to 
the transmitted signal for the purpose of discerning a Doppler shift. The RFID reader 200 is 
capable of altering its transmitted power to vary the detection range of this motion detection 
function. 

These motion detection functions can occur simultaneously with the reading of RFID 
10 transponders 100. Because the RFID transponders 100 are fixed relative to the RFID readers 200, 
no unintended shift in frequency will occur in the reflected signal. Therefore, for each 
transmitted burst to an RFID transponder 100, the RFID reader 200 can analyze the reflected 
signal for both receipt of data from the RFID transponder 100 as well as unintended shifts in 
frequency indicating the potential presence of a person or animal in motion. 

1 5 By combining the above functions, the RFID reader 200, in a single integrated package can be 
capable of (i) communicating with other RFID readers 200, gateways 300, and other devices 550 
using active RF communications 422, power line communications 202 and/or hardwired 
communications 209, (ii) communicating with RFID transponders 100 using wireless 
communications 420, (iii) detecting motion via Doppler analysis at microwave frequencies, (iv) 

20 detecting glass breakage via sound wave analysis of acoustic waves received via an audio 

transducer 210, and (v) providing a two-way audio link to an emergency response agency 460 
via an audio transducer 210 and via a gateway 300. This RFID reader 200 achieves significant 
cost savings versus prior art security systems through the avoidance of new wire installation and 
the sharing of communicating and processing circuitry among the multiple functions. 

25 Furthermore, because the RFID readers 200 are under the control of a single master controller, 
the performance of these functions can be coordinated to minimize interference, and provide 
spatial diversity and redundant confirmation of received signals. 

The motion detector implemented in the RFID reader 200 is only a single detection technology. 
Historically, single motion detection technologies, whether microwave, ultrasonic, or passive 
30 infrared, all suffer false positive indications. For example, a curtain being blown by a heating 
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vent can occasionally be detected by a Doppler analysis motion detector. Therefore, dual 
technology motion detectors are sometimes used to increase reliability - for example by 
combining microwave Doppler with passive infrared so that motion by a warm body is required 
to trigger an alert. An existing embodiment of the RFID reader 200, which can be mounted high 
5 on a wall or on a ceiling, can incorporate a passive infrared sensor 570, if desired, to achieve 
manufacturing cost savings for the same reasons previously discussed for glass breakage. 

However, because the self-install embodiment of the RFID reader 200 will typically be mounted 
directly on power outlets 720, which are relatively low on the wall in most rooms, incorporating 
an infrared sensor 570 in the RFID reader 200 is not a viable option. Passive infrared sensors 570 

1 0 lose their discriminating ability when their line of sight to a warm body is blocked. Because of 
the low mounting height of the RFID reader 200, it is likely that various pieces of furniture in the 
room will act to partially or fully block any view that a passive infrared sensor may have of the 
entire room. In order to overcome this potential limitation, the inventive security system 
implements a novel technique to implement dual technology motion sensing in a room without 

15 the requirement that both technologies be implemented into a single package. 

Existing dual technology sensors implement both technologies into a single sensors because the 
sensors are only capable or reporting a "motion" or "no motion" condition to the alarm panel. 
This is fortunate, because present prior art alarm panels are only capable of receiving a "contact 
closed" or "contact open" indication. Therefore, all of the responsibility for identifying motion 

20 must exist within the single sensor package. The inventive controller function 250 can use active 
RF communications 422, power line carrier 202 protocols, or modulated backscatter 420 to 
communicate with a passive infrared sensor 570 mounted separately from the RFID reader 200. 
Therefore, if in a single room, the RFID reader 200 is detecting motion via microwave Doppler 
analysis and a passive infrared sensor 570 is detecting the presence of a warm body 710 as 

25 shown in Figure 4, the master controller can interpret the combination of both of these 
indications in a single room as the likely presence of a person. 

One embodiment of this passive infrared sensor 570 is in the form of a light switch 730 with 
cover 73 1 as shown in Figure 23A. Most major rooms have at least one existing light switch 730, 
typically mounted at an average height of 55" above the floor. This mounting height is above the 
30 majority of furniture in a room, thereby providing a generally clear view of the room. Passive 
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infrared sensors have previously been combined with light switches 730 so as to automatically 
turn on the light when people are in room. More importantly, these sensor/switches turn off the 
lights when everyone has left, thereby saving electricity that would otherwise be wasted by 
lighting an unoccupied room. Because the primary purpose of these existing devices is to provide 
5 local switching, the devices cannot communicate with central controllers such as existing alarm 
panels. 

The passive infrared sensor 570 that operates with the inventive security system includes a local 
power supply 207 and any of active RF communications 422, power line carrier 202 
communications, or modulated backscatter communications 421 that permit the said passive 

10 infrared sensor 570 to communicate with one or more controller functions 250 in RFID readers 
200 or gateways 300, and be under control of the master controller. At the time of system 
installation, the master controller is configured by the user thereby identifying the rooms in 
which the RFID readers 200 are located and the rooms in which the passive infrared sensors 570 
are located. The master controller can then associate each passive infrared sensor 570 with one or 

15 more RFID readers 200 containing microwave Doppler algorithms. The master controller can 
then require the simultaneous or near simultaneous detection of motion and a warm body, such 
as a person 710, before interpreting the indications as a probable person in the room. 

Because each of the RFID readers 200 and passive infrared sensors 570 are under control of the 
master controller, portions of the circuitry in these devices can be shut down and placed into a 

20 sleep mode during normal occupation of the building. Since prior art motion sensors are 

essentially standalone devices, they are always on and are always reporting a "motion" or "no 
motion" condition to the alarm panel. Obviously, if the alarm panel has been placed into a 
disarmed state because, for example, the building is being normally occupied, then these 
"motion" or "no motion" conditions are simply ignored by the alarm panel. But the sensors 

25 continue to use power, which although the amount may be small, it is still a waste of AC or 

battery power. Furthermore, it is well known in the study of reliability of electronic components 
that "power on" states generate heat in electronic components, and it is heat that contributes to 
component aging and possible eventual failure. 

Additionally, there are some people concerned with being the in presence of microwave 
30 radiation. In reality, the amount of radiation generated by these devices is very small, and 
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commonly believed to not be harmful to humans. However, there is the perception among some 
people that radiation of all types, however small, is still to be avoided. The present security 
system can selectively shut down or at least slow down the rate of the radiation from the RFID 
readers 200 when the security system is in a disarmed mode, or if the homeowner or building 
5 owner wants the security system to operate in a perimeter only mode without regard to the 

detection of motion. By shutting down the radiation and transmissions used for motion detection, 
the security system is conserving power, extending the potential life of the components, and 
reducing the possibility of interference between the RFID reader 200 and other products that may 
be operating in the same unlicensed band. This is advantageous because, for example, while 
10 people are occupying the building they may be using cordless telephones (or wireless LANs, 
etc.) and want to avoid possible interference from the RFID reader 200. Conversely, when the 
security system is armed, there are likely no people in the building, and therefore no use of 
cordless telephones, and the RFID readers 200 can operate with reduced risk of interference from 
the transmissions from said cordless telephones. 

15 The RFID transponder 100 of the present invention is shown is Figure 11. One form may 
typically be provided with an adhesive backing to enable easy attachment to the frame of an 
opening such as, for example, a window 702 frame or door 701 frame. RFID transponder 100 
designs based upon modulated backscatter are widely known and the details of transponder 
design are well understood by those skilled in the art. The RFID transponder 100 will typically 

20 include energy management circuits such as an overvoltage clamp 101 for protection, a rectifier 
105 and regulator 107 to produce proper voltages for use by the charge pump 109 in charging the 
energy store 108 and powering the microprocessor 106. The RFID transponder 100 receives and 
interprets commands from the RFID reader 200 by typically including circuits for clock 
extraction 103 and data modulation 104. Furthermore, the microprocessor 106 can send data and 

25 status back to the RFID reader 200 by typically using a modulator 102 to control the impedance 
of the antenna 1 10. The impedance control alternately causes the absorption or reflection of the 
RF energy transmitted by the RFID reader 200 thereby forming the response wireless 
communications 42 1 . 

Low cost chipsets and related components are available from a large number of manufacturers. 
30 In the present invention, the RFID reader 200 to RFID transponder 100 radio link budget is 
designed to operate at an approximate range of up to 30 meters. In a typical installation, each 
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opening will have an RFID transponder 100 installed. The ratio of RFID transponders 100 to 
each RFID reader 200 will typically be 3 to 8 in an average residential home, although the 
technology of the present invention has no practical limit on this ratio. The choice of addressing 
range is a designer's choice largely based on the desire to limit the transmission of wasted bits. 
5 In order to increase the security of the transmitted bits, the RFID transponders 100 can include 
an encryption algorithm. The tradeoff is that this will increase the number of transmitted bits in 
each message. The key to be used for encryption can be exchanged during enrollment, as 
explained later. 

The RFID transponders 100 are typically based upon a modulated backscatter design. Each RFID 
10 transponder 100 in a room absorbs power radiated 420 from one or more RFID readers 200 when 
the said RFID transponder 100 is being addressed, as well as when other RFID transponders 100 
are being addressed. In addition, the RFID readers 200 can radiate power 420 for the purpose of 
providing energy for absorption by the RFID transponders 100 even when the RFID reader 200 
is not interrogating any RFID transponders 100. Therefore, unlike most RFID applications in 
1 5 which the RFID transponders or tags are mobile and in the read zone of a prior art RFID reader 
briefly, the RFID transponders 100 of the present invention are fixed relative to the RFID readers 
200 and therefore always in the read zone of at least one RFID reader 200. Therefore, the said 
RFID transponders 1 00 have extremely long periods of time in which to absorb, integrate, and 
store transmitted energy. 

20 In a typical day to day operation, the RFID reader 200 is making periodic transmissions. The 
master controller will typically sequence the transmissions from the RFID readers 200 so as to 
prevent interference between the transmissions of any two RFID readers 200. The master 
controller will also control the rates and transmission lengths, depending upon various states of 
the system. For example, if the security system is in a disarmed state during normal occupancy 

25 hours, the master controller may use a lower rate of transmissions since little or no monitoring 
may be required. When the security system is in an armed state, the rate of transmissions may be 
increased so as to increase the rate of wireless communications between the RFID readers 200 
and the various sensors. The increased rate of wireless communications will reduce the latency 
from any attempted intrusion to the detection of the attempted intrusion. The purpose of the 

30 various transmissions will generally fall into several categories including: power transfer without 
information content, direct addressing of a particular RFID transponder 100, addressing to a 
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predetermined group of RFID transponders 100, general addressing to all RFID transponders 100 
within the read range, and radiation for motion detection. 

An RFID transponder 100 can typically only send a response wireless communication 421 in 
reply to a transmission 420 from an RFID reader 200. Furthermore, the RFID transponder 100 
5 will only send a response wireless communication 421 if the RFID transponder 100 has 
information that it desires to communicate. Therefore, if the RFID reader 200 has made a 
globally addressed wireless communication 420 to all RFID transponders 100 asking if any 
RFID transponder 100 has a change in status, an RFID transponder 100 will not respond if in fact 
it has no change in status to report. This communications architecture reduces the use of 

10 resources on multiple levels. On the other hand, if an intrusion sensor 600 detects a probable 
intrusion attempt, it is desirable to reduce the latency required to report the probable intrusion 
attempt. Therefore, the communications architecture also includes a mechanism whereby an 
RFID transponder 100 can cause an interrupt of the otherwise periodic transmissions of any 
category in order to request a time in which the said RFID transponder 1 00 can provide a 

15 response wireless communications with the details of the probable intrusion attempt. The 

interrupt might be, for example, an extended change of state of the antenna (i.e. from terminate 
to shorted) or a sequence of bits that otherwise does not occur in normal communications 
messages (i.e. 01010101). An example sequence may be: (a) the RFID reader 200 may be 
transmitting power 420 without information content, (b) a first RFID transponder 100 causes an 

20 interrupt, (c) the RFID reader 200 detects the interrupt and sends a globally addressed wireless 
communications 420, (d) the said first RFID transponder 100 sends its response wireless 
communications 421. This example sequence may also operate similarly even if in step (a) the 
RFID reader 200 had been addressing a second RFID transponder 100; steps (b) through (d) may 
otherwise remain the same. 

25 Because of the passive nature of the RFID transponder 100, the transfer of energy in which to 
power the RFID transponder 100 relies on the buildup of electrostatic charge across the antenna 
elements 1 10 of the RFID transponder 100. As the distance increases between the RFID reader 
200 and the RFID transponder 100, the potential voltage that can develop across the antenna 
elements declines. For example, under 47 CFR 15.245 the RFID reader 200 can transmit up to 

30 7.5 W power. At a distance of 10m, this transmitted power generates a field of 1500 mV/m and 
at a distance of 30m, the field declines to 500 mV/m. 
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The RFID transponder 100 may therefore include a charge pump 109 in which to incrementally 
add the voltages developed across several capacitors together to produce higher voltages 
necessary to charge the energy store 108 and/or power the various circuits contained within the 
RFID transponder 100. Charge pump circuits for boosting voltage are well understood by those 
5 skilled in the art. For example, patents 5,300,875 and 6,275,681 contain descriptions of some 
examples. 

One form of the RFID transponder 1 00 can contain a battery 111, such as a button battery (most 
familiar use is as a watch battery) or a thin film battery. Batteries of these shapes can be based 
upon various lithium compounds that provide very long life. For example, Cymbet has 

10 developed a thin film battery that is both long life and can be recharged at least 70,000 times. 
Therefore, rather than relying solely on a limited energy store 108 such as a capacitor, the RFID 
transponder 100 can be assured of always having sufficient energy through a longer life battery 
11 1 component. If order to preserve charge in the battery 1 1 1, the processor 106 of the RFID 
transponder 100 can place some of the circuits in the RFID transponder 100 into temporary sleep 

1 5 mode during periods of inactivity. 

The use of the battery 111 in the RFID transponder 100 typically doesn't change the use the 
passive modulated backscatter techniques as the communications means. Rather, the battery 1 1 1 
is typically used to enhance and assist in the powering of the various circuits in the RFID 
transponder 100. However, an enhanced form of the RFID transponder 100 can contain an active 
20 amplifier stage 1 13 which is shown in Figure 12. This amplifier stage 1 13 is used to extend the 
possible range between the RFID reader 200 and the RFID transponder 100 by amplifying the 
return modulated signal 421 normally sent by backscatter modulation alone. Depending on the 
specific design, a duplexor 112 may also be required with the amplifier 113. 

The use of this amplifying stage is particularly useful when the RFID transponder 100 replies to 
25 the RFID reader 200 using a modulation such as On-Off Keyed (OOK) amplitude modulation. 
The OOK operates by receiving a carrier wave from the RFID reader 200 at a center frequency 
selected by the RFID reader 200, or a master controller directing the RFID reader 200, and 
modulating marking (i.e. a "one") and spacing (i.e. a "zero") bits onto the carrier wave at shifted 
frequencies. The marking and spacing bits obviously use two different shifted frequencies, and 
30 ideally the shifted frequencies are selected so that neither creates harmonics that can confuse the 
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interpretation of the marking and spacing bits. In this example, the OOK is not purely on and off, 
but rather two different frequency shifts nominally interpreted in the same manner as a pure on- 
off might normally be interpreted. The purpose is to actively send bits rather that using the 
absence of modulation to represent a bit. The use of OOK, and in particular amplified OOK, 
5 makes the detection and interpretation of the return signal 421 at the RFID reader 200 simpler 
than with some other modulation schemes. 

As mentioned above, the RFID transponder 100 contains a charge pump 109 with which the 
RFID transponder 100 can build up voltages and stored energy with which to regularly recharge 
the battery 1 1 1, if present. If the battery 111 were to be recharged once per day, a battery capable 
10 of being recharged 70,000 times provides a life of over 190 years. This is in stark contrast with 
the battery powered transmitters used in prior art wireless security systems, which have a typical 
life of only 1 to 2 years. 

In addition to the charge pump 109 for recharging the battery 111, the RFID transponder 100 
contains circuits for monitoring the charged state of the battery 1 1 1 . If the battery 1 1 1 is already 

15 sufficiently charged, the RFID transponder 100 can signal the RFID reader 200 using one or 
more bits in a communications message. Likewise, if the battery 111 is less than fully charged, 
the RFID transponder 100 can signal the RFID reader 200 using one or more bits in a wireless 
communications message. Using the receipt of these messages regarding the state of the battery 
1 1 1, if present, in each RFID transponder 100, the RFID reader 200 can take actions to continue 

20 with the transmission of radiated power, increase the amount of power radiated (obviously while 
remaining within prescribed FCC limits), or even suspend the transmission of radiated power if 
no RFID transponder 100 requires power for battery charging. By suspending unnecessary 
transmissions, the RFID reader 200 can conserve wasted power and reduce the likelihood of 
causing unwanted interference. 

25 One form of the RFID transponder 100, excluding those designed be carried by a person or 

animal, is typically connected to at least one intrusion sensor 600. From a packaging standpoint, 
the present invention also includes the ability to combine the intrusion sensors 600 and the RFID 
transponder 100 into a single package, although this is not a requirement of the invention. 

The intrusion sensor 600 is typically used to detect the passage, or attempted passage, of an 
30 intruder through an opening in a building, such as window 702 or door 701 . Thus the intrusion 
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sensor 600 is capable of being in at least two states, indicating the status of the window 702 or 
door 701 such as "open" or "closed". Intrusion sensors 600 can also be designed under this 
invention to report more that two states. For example, an intrusion sensor 600 may have 4 states, 
corresponding to window 702 "closed", window 702 "open 2 inches", window 702 "open 
5 halfway", and window 702 "open fully". 

In a typical form, the intrusion sensor 600 may simply detect the movement of a portion of a 
window 702 or door 701 in order to determine its current state. This may be accomplished, for 
example, by the use of one or more miniature magnets, which may be based upon rare earth 
metals, on the movable portion of the window 702 or door 701, and the use of one or more 

10 magnetically actuated miniature reed switches on various fixed portions of the window 702 or 
door 701 frame. Other forms are also possible. For example, pressure sensitive contacts may be 
used whereby the movement of the window 702 or door 701 causes or relieves the pressure on 
the contact, changing its state. The pressure sensitive contact may be mechanical or electro- 
mechanical such as a MEMS device. Alternately various types of Hall effect sensors may also be 

15 used to construct a multi-state intrusion sensor 600. 

In any of these cases, the input/output leads of the intrusion sensor 600 are connected to, or 
incorporated into, the RFID transponder 100 such that the state of the intrusion sensor 600 can be 
determined by and then transmitted by the RFID transponder 100 in a message to the RFID 
reader 200. 

20 Because the RFID transponder 100 is a powered device (without or without the battery 1 1 1, the 
RFID transponder 100 can receive and store power), and the RFID reader 200 makes radiated 
power available to any device within its read zone capable of receiving its power, other forms of 
intrusion sensor 600 design are also available. For example, the intrusion sensor 600 can itself be 
a circuit capable of limited radiation reflection. Under normally closed circumstances, the close 

25 location of this intrusion sensor 600 to the RFID transponder 100 and the simultaneous reflection 
of RF energy can cause the generation of harmonics detectable by the RFID reader 200. When 
the intrusion sensor 600 is moved due to the opening of the window 702 or door 701, the gap 
between the intrusion sensor 600 and the RFID transponder 100 will increase, thereby reducing 
or ceasing the generation of harmonics. Alternately, the intrusion sensor 600 can contain metal or 

30 magnetic components that act to tune the antenna 1 1 0 or frequency generating components of the 
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RFID transponder 100 through coupling between the antenna 110 and the metal components, or 
the switching in/out of capacitors or inductors in the tuning circuit. When the intrusion sensor 
600 is closely located next to the RFID transponder 100, one form of tuning is created and 
detected by the RFID reader 200. When the intrusion sensor 600 is moved due to the opening of 
5 the window 702 or door 701, the gap between the intrusion sensor 600 and the RFID transponder 
100 will increase, thereby creating a different form of tuning within the RFID transponder 100 
which can also be detected by the RFID reader 200. The intrusion sensor 600 can also be an RF 
receiver, absorbing energy from the RF reader 200, and building an electrostatic charge upon a 
capacitor using a charge pump, for example. The increasing electrostatic charge will create a 
10 electric field that is small, but detectable by a circuit in the closely located RFID transponder 
100. Again, when the intrusion sensor 600 is moved, the gap between the intrusion sensor 600 
and the RFID transponder 100 will increase, causing the RFID transponder 100 to no longer 
detect the electric field created by the intrusion sensor 600. 

Another form of intrusion sensor 600 may be implemented with light emitting diode (LED) 

15 generators and detectors. Two forms of LED-based intrusion sensor 600 are available. In the first 
form, shown in Figure 25 A, the LED generator 601 and detector 602 are incorporated into the 
fixed portion of the intrusion sensor 600 that is typically mounted on the window 702 or door 
701 frame. It is immaterial to the present invention whether a designer chooses to implement the 
LED generator 601 and detector 602 as two separate components or a single component. Then a 

20 reflective material, typically in the form of a tape 603 can be attached to the moving portion of 
the window 702 or door 701 . If the LED detector 602 receives an expected reflection from the 
LED generator 601, then no alarm condition is present. If the LED detector 602 receives a 
different reflection (such as from the paint of the window rather than the installed reflector) or no 
reflection from the LED generator 601, then an intrusion is likely being attempted. The reflective 

25 tape 603 can have an interference pattern 604 embedded into the material such that the 

movement of the window 702 or door 701 causes the interference pattern 604 to move past the 
LED generator 601 and detector 602 that are incorporated into the fixed portion of the intrusion 
sensor 600. In this case, the movement itself signals that an intrusion is likely being attempted 
without waiting further for the LED detector 602 to receive a different reflection or no reflection 

30 from the LED generator 601. The speed of movement is not critical, as it is the data encoded into 
the interference pattern 604 and not the data rate that is important. The use of such an 
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interference pattern 604 can prevent easy defeat of the LED-based intrusion sensor 600 by the 
simple use of tin foil, for example. A different interference pattern 604, incorporating a different 
code, can be used for each separate window 702 or door 701, whereby the code is stored into the 
master controller and associated with each particular window 702 or door 701. This further 
5 prevents defeat of the LED-based intrusion sensor 600 by the use of another piece of reflective 
material containing any other interference pattern 604. This use of the LED-based intrusion 
sensor 600 is made particularly attractive by its connection with an RFID transponder 100 
containing a battery 111. The LED generator 601 and detector 602 will, of course, consume 
energy in their regular use. Since the battery 1 1 1 of the RFID transponder 100 can be recharged 
10 as discussed elsewhere, this LED-based intrusion sensor 600 receives the same benefit of long 
life without changing batteries. 

A second form of LED-based intrusion sensor 600 is also available. In this form, the LED 
generator 601 and LED detector 602 are separated so as to provide a beam of light across an 
opening as shown in Figure 25B. This beam of light will typically be invisible to the naked eye 

1 5 such that an intruder cannot easily see the presence of the beam of light. The LED detector 602 
will typically be associated with the LED-based intrusion sensor 600, and the LED generator 601 
will typically be located across the opening from the LED detector 602. In this form, the purpose 
of the LED-based intrusion sensor 600 is not to detect the movement of the window 702 or door 
701, but rather to detect a breakage of the beam caused by the passage of the intruder through the 

20 beam. This form is particularly attractive if a user would like to leave a window 702 open for air, 
but still have the window 702 protected in case an intruder attempts to enter through the window 
353. As before, it would be preferred to modulate the beam generated by the LED generator 601 
so are to prevent easy defeat of the LED detector 602 by simply shining a separate light source 
into the LED detector 602. Each LED generator 601 can be provided with a unique code to use 

25 for modulation of the light beam, whereby the code is stored into the master controller and 

associated with each particular window 702 or door 701. The LED generator 601 can be powered 
by a replaceable battery or can be attached to an RFID transponder 100 containing a battery 111 
so that the LED generator 601 is powered by the battery 1 1 1 of the RFID transponder 100, and 
the battery 111 is recharged as discussed elsewhere. In this latter case, the purpose of the RFID 

30 transponder 100 associated with the LED generator 601 would not be report intrusion, but rather 
only to act to absorb RF energy provided by the RFID reader 200 and charge the battery 111. 
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In each of the cases, the RFID transponder 100 is acting with a connected or associated intrusion 
sensor 600 to provide an indication to the RFID reader 200 that an intrusion has been detected. 
The indication can be in the form of message from the RFID transponder 100 to the RFID reader 
200, or in the form of a changed characteristic of the transmissions from the RFID transponder 
5 100 such that the RFID reader 200 can detect the changes in the characteristics of the said 
transmission. It is impossible to know which form of intrusion sensor 600 will become most 
popular with users of the inventive security system, and therefore the capability for multiple 
forms has been incorporated into the invention. Therefore, the inventive nature of the security 
system and the embodiments disclosed herein is not limited to any single combination of 
10 intrusion sensor 600 technique and RFID transponder 100. 

Other embodiments of RFID transponders 100 may exist under the present invention. Two other 
forms of passive infrared sensors 570 can be created by combining a passive infrared sensor 570 
with the circuits of the RFID transponder 100. In this manner, the master controller can 
communicate with the passive infrared sensor 570 without the size, form factor, and cost of the 

15 power line communications 202 interface and associated circuits. As shown in Figure 24 A, in 
one embodiment the passive infrared sensor 570 with its power supply 207 is integrated into the 
packaging of a light switch 730. Within this same packaging, an RFID transponder 100 is also 
integrated. The passive infrared sensor 570 operates as before, sensing the presence of a warm 
body 710. The output of the passive infrared sensor 570 circuits are connected to the RFID 

20 transponder 100 whereby the RFID transponder 100 can relay the status of the passive infrared 
sensor 570 (i.e. presence or no presence of a warm body 710 detected) to the RFID reader 200, 
and then to the master controller/At the time of system installation, the master controller is 
configured by the user thereby identifying the rooms in which the RFID readers 200 are located 
and the rooms in which the passive infrared sensors 570 are located. The master controller can 

25 then associate each passive infrared sensor 570 with one or more RFID readers 200 containing 
microwave Doppler algorithms. The master controller can then require the simultaneous or near 
simultaneous detection of motion and a warm body, such as a person 710, before interpreting the 
indications as a probable person in the room. 

It is not a requirement that the passive infrared sensor 570 be packaged into a light switch 730 
30 housing. As shown in Figure 24B, in another embodiment the passive infrared sensor 570 is 
implemented into a standalone packaging. In this embodiment, both the passive infrared sensor 
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570 and the RFID transponder 100 are battery 208 powered so that this sensor/transponder 
combination can be located anywhere within a room. So, for example, this embodiment allows 
the mounting of this standalone packaging on the ceiling, for a look down on the covered room, 
or the mounting of this standalone packaging high on a wall. 

5 The present invention also includes a novel method of enrolling RFID transponders 100 with the 
master controller. The process of enrolling refers to identifying the RFID transponders 100 that 
are associated with each security system. Each RFID transponder 100 contains a unique serial 
number to distinguish that RFID transponder 100 from others that may be located in the same 
building as well as other RFID transponders 1 00 that may be located in other buildings. The 

10 process of enrolling must prevent the unintentional enrollment of RFID transponders 100 that are 
not intended to be associated with a given security system, without regard to whether the 
unintentional enrollment would be accidental or malicious. Furthermore, during the process of 
enrollment, the RFID transponder 100 exchanges more detailed information about itself than 
would otherwise be transmitted during normal routine transmissions. This more detailed 

15 information (for example, the encryption key) allows the RFID transponder 100 and RFID reader 
200 to mutually encrypt communications, if necessary, between themselves so that intruders or 
other interlopers may be prevented from interpreting or spoofing the routine communications 
between the RFID transponder 100 and RFID reader 200. Spoofing refers to the generation of 
false communications that attempts to trick a security system into reporting normal conditions 

20 when in fact an intrusion is being attempted and the security system would be causing an alert in 
the absence of the spoofing. Therefore, during enrollment, it would be advantage to ensure to the 
greatest degree possible that the more detailed information is not intercepted. 

In prior art security systems using transmitters operating under 47 CFR 15.231, the transmitters 
frequently require programming to associate them with the security system. In some cases, this 
25 programming requires the attachment of a special programming console to the transmitter. This 
is generally not an operation that can be performed by a homeowner. Alternately, the transmitter 
is identified by a serial number, which then must be manually typed into the keypad. Given the 
size of the typical keypad and LCD display, and the number of transmitters in a home, this 
manual process can be quite arduous. 



50 



RFID-0107 



In the present invention, the RFID reader 200 is capable of altering its transmitted power so as to 
vary the range of its read zone (that is, the distance and shape of the area in which the RFID 
reader 200 can communicate with an RFID transponder 100). 47 CFR 15.245 permits a 
maximum average transmit power of 75 mW, but there is no restriction on how low the power 
5 can be set. Therefore, using the present invention, when the user desires to enroll with the master 
controller of a given security system, the following process is followed. The master controller is 
placed into an enrollment mode. During the enrollment mode, one or more RFID readers 200 are 
instructed to prepare for enrollment, which entails setting its power level to a low level, thereby 
creating only a small read zone near to said RFID reader 200. The RFID reader 200 may 

10 command all known RFID transponders 100, that is those RFID transponders 100 already 
enrolled with the master controller, to not respond to the RFID reader, thereby allowing the 
RFID reader 200 to receive responses only from new RFID transponders 100 not already 
enrolled. The user of the system brings an unenrolled RFID transponder 100 near to the RFID 
reader 200. Near in this case will typically be within 20 to 30 centimeters of the RFID reader 

15 200.Once the RFID reader 200 can detect the RFID transponder 100, the RFID reader 200 will 
sequentially step its power down in incremental steps to verify that the RFID transponder 100 is 
in fact very near to the RFID reader 200. Each incremental step down in power further reduces 
the size and shape of the read zone. As the power is reduced, all other RFID transponders 100 in 
the vicinity of the RFID reader 200 should no longer be detectable, and only the RFID 

20 transponder 100 being enrolled will be detectable. The RFID reader 200 will reduce its power to 
a predetermined threshold, at which point the RFID reader 200 can be reasonably certain that the 
RFID transponder 100 is physically close to the RFID reader 200. At this point of physical 
closeness and low power, it is highly unlikely that the communications between the two devices 
can be intercepted. At this point, the RFID transponder 100 provides its unique serial number 

25 including the detailed information required for the RFID reader 200 and RFID transponder 100 
to engage in encrypted communications. After this particular exchange, the RFID transponder 
100 is enrolled, and the master controller may provide some form of feedback, such as audible or 
visual, to the user indicating that the RFID transponder 100 has been enrolled. Now the RFID 
transponder 100 may be installed. 

30 In a similarly novel manner, RFID readers 200, gateways 300, and other devices 550 may be 

enrolled with each other and therefore with the master controller. The same type of issues related 
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in the foregoing apply to this enrollment process. The goal is to enable the network of devices 
within the inventive security system to exchange communications that may be encrypted without 
sharing certain identity or encryption information in the open where it can be intercepted. The 
automatic method of the present invention proceeds as follows. 

5 The installer of the system may first install and power on at least one RFID reader 200. Each 
gateway 300 or other device 550, except RFID readers 200, is provided with an associated 
master key RFID transponder 265. This will typically be either in a small form factor that is 
portable or can in fact be embedded into the packaging of the gateway 300 or other device 550. 
In a sense, it is like a key for entry to the system. The master controller, which is likely to 

10 initially be the first RFID reader 200 powered on, is placed into an enrollment mode. During the 
enrollment mode, one or more RFID readers 200 are instructed to prepare for enrollment, which 
entails setting its power level to a low level, thereby creating only a small read zone near to said 
RFID reader 200.The user of the system brings the master key RFID transponder 265 (which 
may be separate or embedded into the packaging of a gateway 300 or other device) near to the 

15 RFID reader 200. Near in this case will typically be within 20 to 30 centimeters of the RFID 
reader 200. Once the RFID reader 200 can detect the master key RFID transponder 265, the 
RFID reader 200 will sequentially step its power down in incremental steps to verify that the 
master key RFID transponder 265 is in fact very near to the RFID reader 200. Each incremental 
step down in power further reduces the size and shape of the read zone. As the power is reduced, 

20 all other RFID transponders 100 in the vicinity of the RFID reader 200 should no longer be 

detectable, and only the master key RFID transponder 265 will be detectable. The RFID reader 
200 will reduce its power to a predetermined threshold, at which point the RFID reader 200 can 
be certain that the master key RFID transponder 265 is physically close to the RFID reader 200. 
At this point of physical closeness and low power, it is highly unlikely that the communications 

25 between the two devices can be intercepted. The master controller commands the RFID reader 
200 to read the master key RFID transponder 265, and verifies the content of the master key 
RFID transponder 265. If the master key RFID transponder 265 is properly verified, the master 
controller enrolls the RFID reader 200 by receiving its unique identity codes. If desired for 
higher security, the master key RFID transponder 265 can contain a code used for encrypting 

30 communications. This code, once received by the RFID reader 200, can be used to encrypt all 
communications between the master controller and the RFID reader 200.The code remains secret 
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because it is only transmitted over the short air gap between the RFID reader 200 and the master 
key RFID transponder 265 during enrollment, and never over the power lines 250, or at high 
enough power that it is detectable outside of the immediate physical vicinity of the RFID reader 
200 or user during enrollment. It is not a requirement that the code is ever user readable or user 
5 accessible. 

In a larger security system with many RFID readers 200, gateways 300, and other devices 550, 
the above process may entail the exchange of multiple master keys 265. For example, gateway A 
is registered using key A with RFID reader C and RFID reader D, and then gateway B is 
registered using key B with RFID reader C. RFID reader C can provide key B to both gateway A 

10 and reader D using key A. Eventually, the entire network of devices within the security system 
has the full set of master keys 265 necessary for any device to communicate with any other 
device, whether the communications is active RF 422 or power line carrier 202. Furthermore, 
once the keys 265 are known to all the devices, the master controller may command all device to 
shift to a single new key. The important aspects of the above process are that (i) the user is not 

15 required to type codes of any kind into a programming terminal of any type, and (ii) the unique 
keys 265 are never compromised by being openly sent at power levels and over distances 
capable of being intercepted. 

Because the RFID reader 200 and RFID transponder 100 operate in one of the shared frequency 
bands allocated by the FCC, these devices, as do all Part 15 devices, are required to accept 

20 interference from other Part 1 5 devices. It is primarily the, responsibility of the RFID reader 200 
to manage communications with the RFID transponder 100, and therefore the following are some 
of the capabilities that may be included in the RFID to mitigate interference. First, the RFID 
reader 200 can support the use of multiple modulation schemes. For example, 47 CFR 15.245 
rules has a bandwidth of 26 MHz in the 902 to 928 MHz band and 30 MHz in the 2435 to 2465 

25 MHz band, with no restrictions on modulation scheme or duty cycle. The other devices operating 
in these bands will typically be frequency hopping devices that have divided their allowable 
spectrum into channels, where each channel may typically be 250 KHz, 500 KHz, 1 MHz, or 
similar. The specific channels used by other devices may or may not overlap with the spectrum 
used by the present invention. The most typical case is a partial overlap. For example, some 

30 wireless LAN devices follow a standard known as 802.1 1 , which uses the spectrum 2400 to 
2483.5 MHz, and employs 75 channels, each with a bandwidth of 1 MHz. These devices only 
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partially overlap the 2435 to 2465 MHz spectrum that may be used by the present invention. All 
frequency hopping devices operating under 47 CFR 15.247 will typically occupy each of their 
channels for no more than 400 milliseconds. Therefore, 802.1 1 devices, in this example, have the 
potential for causing only transitory interference and only for a small proportion of the time (no 
5 more than 30/75 th probability, or 40%). 

The RFID reader 200 can vary its modulation scheme, under command of the master controller. 
The RFID transponder 1 00 uses backscatter modulation, which alternately reflects or absorbs the 
signal radiated by the RFID reader 200 in order to send its own data back. Therefore, the RFID 
transponder 100 will automatically follow, by design, the specific frequency and modulation 
10 used by the RFID reader 200.This is a significant advantage versus prior art wireless security 
system transmitters, which can only transmit at a single modulation scheme with its carrier 
centered at a single frequency. If interference is encountered at or near that single frequency, 
these transmitters of prior art wireless security system have no ability to alter their transmission 
characteristics to avoid or mitigate the interference. 

15 An RFID reader 200 can be implemented to support any of the following modulation schemes, 
though the present invention is not limited to just these modulation schemes. As is well known in 
the art, there are many modulation techniques and variations within any one modulation 
technique, and designers have great flexibility in making choices in this area. The simplest is a 
carrier wave (CW) signal, at a variety of frequency choices within the allowable bandwidth. The 

20 CW conveys no information from the RFID reader 200 to the RFID transponder, but still allows 
the RFID transponder 100 to backscatter modulate 421 the signal on the return path as described 
earlier. The RFID reader 200 would typically use another modulation scheme such as Binary 
Phase Shift Keyed (BPSK), Gaussian Minimum Shift Keyed (GMSK), Gaussian Frequency Shift 
Keyed (GFSK) or even on-off keyed (OOK) AM, when sending data to the RFID transponder 

25 100, but can use CW when expecting a return signal 421 . The RFID reader 200 can concentrate 
its transmitted power into this CW, permitting this narrowband signal to overpower a portion of 
the spread spectrum signal typically used by other devices operating in the unlicensed bands. If 
the RFID reader 200 is unsuccessful with CW at a particular frequency, the RFID reader 200 can 
shift frequency within the permitted band. As stated, under the present invention the RFID 

30 transponder 100 will automatically follow the shift in frequency by design. Rather than 

repeatedly generating CW at a single frequency, the RFID reader 200 can also frequency hop 
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according to any prescribed pattern. The pattern may be predetermined or pseudorandom. This 
pattern can be adaptive and can be varied, as needed to avoid interference. 

If the success rate with frequency hopping is, in itself, insufficient to overcome interference, the 
RFID reader 200 can use a multicarrier modulation scheme, whereby the signal content in now 
5 spread into multiple frequencies within a predetermined bandwidth. Since the anticipated 

interference will likely be coming from frequency hopping devices (based upon the profiles of 
devices registered in the FCC equipment database for these frequency bands), and only for brief 
periods of time (less than 400 milliseconds, which is a requirement of most devices operating 
under 47 CFR 15.247), if the RFID reader 200 spreads its signal out across multiple frequencies 

10 in the permitted band then only a portion of the signal will be interfered with at any one point in 
time. The remaining portion of the signal will likely retain its fidelity. The multicarrier 
modulation scheme may be spread spectrum or another appropriate scheme. Finally, the RFID 
reader 200 can combine a multicarrier modulation scheme with frequency hopping so as to both 
spread its energy within a predetermined channel and also periodically change the channel within 

1 5 the permitted band in which it is operated. There are some devices, such as microwave ovens, 
which may bleed energy into one of the unlicensed bands. This will typically cause interference 
in only a region of the band, and will not be moving (as in channel hopping). Therefore the RFID 
reader 200 can detect repeated failures in the interfered region of the band, and avoid that region 
for a period of time. The availability of 47 CFR 15.245 as the rule basis in addition to 47 CFR 

20 15.247 permits the RFID reader 200 great flexibility in responding the environmental conditions 
experienced in each installation, and at each point in time. Very few other devices have such 
operating flexibility. 

There may be times when the interference experienced by the RFID reader 200 is not 
unintentional and not coming from another Part 15 device. One means by which a very 

25 technically knowledgeable intruder may attempt to defeat the security system, or any wireless 
system, of the present invention is by intentional jamming. Jamming is an operation by which a 
malicious intruder independently generates a set of radio transmissions intended to overpower or 
confuse legitimate transmissions. In this case, the intruder would likely be trying to prevent one 
or more RFID transponders 100 from reporting a detected intrusion to the RFID reader 200, and 

30 then to the master controller. Jamming, is of course, illegal under the FCC rules; however 

intrusion itself is also illegal. In all likelihood, a person about to perpetrate a crime may not give 
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any consideration to the FCC rules. Therefore, the RFID reader 200 also contains algorithms that 
can determine within a reasonable probability that the RFID reader 200 is being subjected to 
jamming. If one or more RFID readers 200 detect a change in the radio environment, in a 
relatively short predetermined period of time, wherein attempted changes in modulation 
5 schemes, power levels, and other parameters are unable to overcome the interference, the master 
controller can cause an alert indicating that it is out of communications with one or more RFID 
transponders 100 with the likely cause being jamming. This condition can be distinguished from 
the failure of a single RFID transponder 100 by a simultaneous and parallel occurrence of the 
change in RF environment, caused by signals not following known FCC transmission rules for 
10 power, duty cycle, bandwidth, modulation, or other related parameters and characteristics. The 
alert can allow the building owner or emergency response agency 460 to decide upon an 
appropriate response to the probable jamming. 

In addition to its support of multiple modulation schemes, the RFID reader 200 is available in an 
embodiment with multiple antennas that enables the RFID reader 200 to subdivide the space into 

15 which the RFID reader 200 transmits and/or receives. It is well known in antenna design that it 
desirable to control the radiation pattern of antennas to both minimize the reception of noise and 
maximize the reception of desired signals. An antenna that radiates equally in all directions is 
termed isotropic. An antenna that limits its radiation into a large donut shape can achieve a gain 
of 2dBi. By limiting the radiation to the half of a sphere above a ground place, an antenna can 

20 achieve a gain a 3 dBL By combining the two previous concepts, the gain can be further 
increased. By expanding upon these simple concepts to create antennas that further limit 
radiation patterns, various directional gains can be achieved. The RFID reader 200 circuit design 
permit the construction of embodiments with more than one antenna, whereby the transceiver 
circuits can be switched from one antenna to another. In one example, the self-installed 

25 embodiment of the RFID reader 200 will typically be plugged into an outlet 720. Therefore, the 
necessary coverage zone of the RFID reader 200 is logically bounded by the planes created by 
the floor below the reader and the wall behind the reader. Therefore, relative to an isotropic 
antenna, the read zone of the RFID reader 200 should normally be required to cover the space 
contained within only one-quarter of a sphere. Therefore, a single antenna configured with the 

30 RFID reader 200 should typically be designed a gain of approximately 6 dBi. By comparison, the 
antennas of most centralized transceivers of prior art wireless security systems are isotropic or 
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have a gain of only 2 to 3 dBi because the wireless transmitters of these prior art systems can be 
located in any direction from the one centralized transceiver. This design limitation detracts from 
their receive sensitivity. 

However, it may be desirable to farther subdivide this space into multiple subspaces, for example 
5 a "left" and a "right" space, with antenna lobes that overlap in the middle. Each antenna lobe 
may be then able to increase its design gain to approximately 9 dBi or more. Since the RFID 
readers 200 and RFID transponders 100 are fixed, the RFID reader 200 can "learn" in this 
example "left"/ "right" configuration which RFID transponders 100 have a higher received 
signal strength in each of the "left" and "right" antennas 206. The simplest method by which this 

10 can be achieved is with two separate antennas 206, with the transceiver circuits of the RFID 
reader 200 switching between the antennas 206 as appropriate for each RFID transponder 100. 
This enables the RFID reader 200 to increase its receiver sensitivity to the reflected signal 
returning from each RFID transponder 100 while improving its rejection to interference 
originating from a particular direction. This example of two antennas 206 can be expanded to 

15 three or four antennas 206. Each subdivision of the covered space results can allow a designer to 
design an increase in the gain of the antenna 206 in a particular direction. Because the physical 
packaging of the RFID reader 200 has physical depth proportionally similar to its width, three 
antenna 206 patterns is a logical configuration in which to offer this product, where one antenna 
206 looks forward, one looks left, and the other looks right. An alternate configuration which is 

20 equally logical, can employ four antennas 206, one antenna 206 looks forward, the second looks 
left, the third looks right, and the fourth looks up. These example configurations are 
demonstrated in Figure 20A and 20B. 

There are multiple manufacturing techniques available whereby the antennas can be easily 
printed onto circuit boards or the housing of the RFID reader 200 thereby creating antennas 

25 known as patch antennas or microstrip antennas. The reader is directed to Compact and 

Broadband Microstrip Antennas, by Kin-Lu Wong, published by Wiley, 2002 as one source for a 
description of the design and performance of these microstrip antennas. This present 
specification is not recommending the choice of any one specific antenna design, because so 
much relies on the designer's preference and resultant manufacturing costs. However, when 

30 considering the choice for antenna design for both the RFID reader 200 and the RFID 

transponder 100, the following should be taken into consideration. Backscatter modulation relies 
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in part upon the Friis transmission equation and the radar range equation. The power P r that the 
receiving RFID reader 200 can be expected to receive back from the RFID transponder 100 can 
be estimated from the power P t transmitted from the transmitting RFID reader 200, the gain G t of 
the transmitting RFID reader 200 antenna, gain G r of the receiving RFID reader 200 antenna, the 
5 wavelength X of the carrier frequency, the radar cross section a of the RFID transponder 100 
antenna, and the distances Ri from the transmitting RFID reader 200 to the RFID transponder 
100 and R2 from the RFID transponder 100 to the receiving RFID reader 200.(Since more than 
one RFID reader 200 can receive a wireless communications from the RFID transponder 100, the 
general case is considered here.) The radar range equation is then: 

10 P r = P t • a ■ [G t • G r / 4tc] • [A747rRiR 2 ] 2 

Therefore, the designer should consider antenna choices for the RFID readers 200 and RFID 
transponders 100 that maximize, in particular, G r and a. The combination of P t and G t cannot 
result in a field strength that exceeds the prescribed FCC rules. The foregoing discussion of 
microstrip antennas does not preclude the designer from considering other antenna designs. For 

15 example, dipoles, folded dipoles, and log periodic antennas may also be considered. Various 
patents such as 6,147,606, 6,366,260, 6,388,628, 6,400,274, among others show examples of 
other antennas that can be considered. Unlike other applications for RFID, the security system of 
the present invention uses RFID principles in a primarily static relationship. Furthermore, the 
relationship between the RFID reader 200 antennas and RFID transponder 100 antennas will 

20 typically be orthogonal since most buildings and homes have a square or rectangular layout with 
largely flat walls. This prior knowledge of the generally static orthogonal layout should present 
an advantage in the design of antennas for this RFID application versus all other RFID 
applications. 

Some example antenna designs are shown in Figure 26. One form of the RFID transponder 100 
25 will typically be used in residential homes. The windows 702 and doors 701 of most residential 
homes are surrounded by a type of moulding known as casing 703. Many shapes of casing 703 
are available, but they all share the two important features of width and depth. Typically, the 
minimum width is 2.25 inches and the minimum depth of the side furthest from the window 702 
or door 701 is 0.5 inches. By taking advantage of these known minimum dimensions and the 
30 orthogonal layout of most residential homes, wraparound corner antenna design such as 271 or 



58 



RFID-0107 



272 are possible as shown that provide a reflective surface in two directions and increases the 
antenna surface area and the radar cross section a of the resultant antenna 206 even when viewed 
from multiple directions. The corner reflector design for the RFID transponder 100 antenna 271 
or 272 increases the layout flexibility of the RFID transponders 100 and the RFID readers 200 in 
5 any given room. Alternately, an antenna can be designed to be inserted under the moulding such 
that the antenna is between the moulding and the underlying drywall. This permits a hidden 
antenna that can be relatively large in surface area. 

Many commercial buildings do not use moulding around their windows 702, however the wall 
thickness is frequently much more than the window 702 depth, giving rise to right angle drywall 

10 surface as shown in Figure 26. This is also advantageous for another wraparound corner antenna 
design such as 273, and in fact provides more flexibility is designing the physical dimensions 
because commercial building owners are less sensitive about aesthetics than homeowners. The 
reflective surface of the antenna designs 271-273 can be covered with a plastic housing capable 
of accepting paint so that the RFID transponder 100 can be painted after installation so as to 

1 5 blend in with the wall decor. 

As with several other features of the present invention, designers can make preferred choices on 
configuration without deducting from the intentions of the present invention, and therefore no 
limitation should be construed by the choice of any specific number of antennas or type of 
antenna design. 

20 The architecture of the security system of the present invention provides an advantage to the 
physical design of antennas for the RFID readers 200. The concepts of directional antenna gain 
have been applied to various wireless systems, such as cellular systems. However, these systems 
suffer from the design constraint of multiple sectored antennas simultaneously transmitting. 
Therefore, in order to achieve the types of gains stated above, these antennas must be designed 

25 with large front to back signal rejection ratios, for example. The present security system is under 
command, at all times, of a central master controller, which can sequence the transmissions of 
each of the RFID readers 200 installed in each system. Therefore, the antenna design parameters 
are relaxed by knowing that the system is not self-interfering whereby the antenna of one RFID 
reader 200 must be designed to reject the signals simultaneously generated by another RFID 
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reader 200.This centralized control and simplified antenna design parameters permit the present 
system to be manufactured at lower cost. 

The range of the present security system can be extended, if necessary in certain installations, in 
the following manner. FCC rule section 47 CFR, 15. 249 permits the construction of transmitters 
5 in the bands 902 to 928 MHz and 2400 to 2483.5 MHz with a field strength of 50 mV/m at 3 
meters (equivalent to approximately 750 microwatts). Unlike the RFID transponders 100, 
transmitters under this rule section must now be active transmitters 560. These active 
transmitters 560 require more components, and therefore will be more expensive to manufacture 
than the RFID transponders 100. They will also likely suffer from some of the same 

10 disadvantages of the transmitters of prior art wireless security systems such as reduced battery 
life, with the following exceptions. 47 CFR 15.249 does not have the duty cycle restrictions of 
47 CFR 15.231. The field strength limits of 47 CFR 15.249 are greater than the field strength 
limits of 47 CFR 15.231. The RFID reader 200 can confirm receipt of a transmissions from an 
active transmitter 560 so that the transmitter 560 knows its message has been received. If the 

15 message has not been received, the transmitter 560 can shift frequency. Finally, the present 

security system is not based around a single central transceiver; distributed RFID readers 200 are 
still used with all of the aforementioned advantages. If the building owner has are area too large 
in which to operate using the lower cost RFID transponders 100, transmitters 560 may be used in 
place of the RFID transponders 100. In the manner previously discussed, the transmitters 560 

20 will now be connected to an intrusion sensor 600. A single RFID reader 200 can communicate 
with both RFID transponders 100 and transmitters 560, and the RFID reader 200 remains in 
control of communications with both the RFID transponders 100 and transmitters 560 to avoid 
system self-interference and collisions. In addition to covering larger areas, these active 
transmitters 560 can be used to monitor objects that have their own battery power source, such as 

25 automobiles, tractors, or watercraft. Thus, the security system enables the coverage of more than 
just the perimeter and interior of a home or other building. 

One additional form of an active transmitter 560 is a handheld device known as a keyfob 561 . 
Key fobs 561 are widely used today for locking and unlocking cars, and a number of prior art 
wireless alarm panels also support keyfobs 561. The present security system also includes 
30 support for keyfobs 561, whose signals can be received by either RFID readers 200 or gateways 
300. Typically, the security system would be programmed such that the function keys on the 
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keyfob 561 will be used to place the system into either armed or disarmed mode. The batteries on 
key fobs 561 will typically last for years because the key fobs 561 only transmit when a button is 
pressed. 

The RFID reader 200 is not limited to reading just the RFID transponders 100 installed in the 
5 openings of the building. The RFID reader 200 can also read RFID transponders 100 that may be 
carried by individuals 710 or animals 71 1, or placed on objects of high value. By placing an 
RFID transponder 100 on an animal 71 1, for example, the controller function 250 can optionally 
ignore indications received from the motion sensors if the animal 711 is in the room where the 
motion was detected. By placing an RFID transponder 100 on a child, the controller function 250 

1 0 can use any of the modules 3 1 0 to 3 1 3 installed in a gateway 300, to send an message to a parent 
at work when the child has arrived home or equally important, if the child was home and then 
leaves the home. The RFID transponder 100 can also include a button than can be used, for 
example, by an elderly or invalid person to call for help in the event of a medical emergency or 
other panic condition. When used with a button, the RFID transponder 100 is capable of 

15 reporting two states: one state where the RFID transponder 100 simply registers its presence, and 
the second state in which the RFID transponder 100 communicates the "button pressed" state. It 
can be a choice of the system user of how to interpret the pressing of the button, such as causing 
an alert, sending a message to a relative, or calling for medical help. Because the RFID readers * 
200 will typically be distributed throughout a house, this form of panic button can provide a 

20 more reliable radio link than prior art systems with only a single centralized receiver. 

Earlier, the X-10 power line protocol was mentioned and then dismissed as a contender for use in 
the power line communications of the disclosed invention. The X-10 protocol is far too simple 
and lacking in reliability features for use in a security system. However, there is reportedly over 
100 million lighting and appliance control devices that have shipped with the X-10 protocol. 

25 These devices are typically used only to turn on, turn off, or variably dim lights or appliances. 
Because the RFID reader 200 and gateway 300 are already coupled to the power lines 250, these 
devices are also capable of generating the 120 KHz pulses necessary to send X-10 based 
commands to X-10 devices that may be installed in the building or home. The controller function 
250 can be configured, for example, to turn on certain lights when an intrusion has been detected 

30 and when the system has been disarmed. The support for this protocol is only as a convenience 
for these legacy devices. 
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The security system also includes an optional legacy interface module 580 shown in Figure 16. 
This interface module 580 can be used by building owners or homeowners that already have 
certain parts of a prior art wired security system installed, and would like to continue to use these 
parts in conjunction with the inventive security system disclosed herein. Older wired security 
5 systems operate on the contact "closed" or "open" principle. That is, each sensor, whether 
magnetic/reed switch window/door contact, motion sensor, glass breakage sensor, heat sensor, 
etc., is in one state (generally contact "closed") when normal, and then is the other state 
(generally contact "open") when in the detection state (i.e. intrusion, motion, heat, etc.). The 
interface module 580 allows these legacy devices to be monitored by the controller 300. The 

10 interface module 580 provides active RF 422 or power line communications 202 to the controller 
function 250, terminal interfaces 581 for the wires associated with the sensors, DC power 582 to 
powered devices, and battery 583 backup in the case of loss of primary power. The controller 
function 250 must be configured by the user to interpret the inputs from these legacy devices. 
The interface module 580 also implements the bus protocol supported by the legacy keypads 500 

1 5 currently used with prior art wired security systems. This bus protocol is separate from the 

contact "closed" or "open" interfaces described in the foregoing; it is typically a 4-wire interface 
whereby commands and responses can be modulated onto the wires. Because of the large 
numbers of these keypads 500 installed into the marketplace, there is a high degree of familiarity 
in the home security user base for the form factor and function of these keypads 500. One 

20 example of such a keypad 500 supported by the interface module 580 is shown in design patent 
D389,762, issued Jan. 27, 1998 to Yorkey, and assigned to Brinks Home Security. 

The inventive security system provides a number of mechanisms for users and operators to 
interface with the security system. On a day to day basis, it is expected that most security 
systems will include a keypad 500 similar to one shown in Figure 21 since it is a convenient 

25 means by which authorized persons can arm or disarm the system and view the status of various 
zones. There are a number of keypad options that can be made available for the security system, 
derived from permutations of the following possibilities: (i) active RF communications 422, 
backscatter modulation 421, or power line carrier communications 202 with the RFID readers 
200, gateways 300, and other devices 550, (ii) AC powered or battery powered, and if battery 

30 powered, rechargeable from the RFID readers 200 in the manner discussed earlier for RFID 
transponders 100, and (iii) inclusion, or not, of sufficient processing 261 and memory 266 
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capability to also support a controller function 250. In smaller systems, it may be useful for the 
keypad 500 to be capable of supporting a controller function 250. In larger systems, there will 
already be a number of RFID readers 200 (and probably gateways 300) with controller functions 
250 such that adding one more will not increase the reliability of the system. The choice of 
5 communications means by the keypad 500 sends and receives commands to the network of 

devices in the system will largely be driven by the communications choice used by and between 
the RFID readers 200 and gateways 300. The choice of power means will largely be a designer 
choice. 

One example keypad 500 may be mounted, for example, onto the type of electrical box 243 used 
10 for light switches 730. One form of packaging that is particularly suited to mounting onto 

electrical boxes 732 used for light switches 730 is shown in Figure 22. In this figure, the keypad 
500 is packaged with a light switch 730 so that the installation of the present security system 
does not result in the loss of an accessible light switch 730. The power supply 308 and, power 
line communications interface circuits 202 if included, are packaged with a light switch 730 into 
15 an AC interface unit 733 and installed into electrical box 732. A wire connection 734 protrudes 
from this AC interface unit 733 for connection to the keypad 500, The keypad 500 is then 
mounted onto the wall in such a manner that the light switch 730 portion of the AC interface unit 
733 protrudes through the housing of the keypad 500, thereby enabling both the light switch 730 
to be accessible and the keypad 500 to access AC power through an existing electrical box 732. 

20 Another interface mechanism available for use with the security system is voice recognition and 
voice response. When an RFID reader 200 is manufactured with an acoustic transducer 210, the 
RFID reader 200 can also include software based functionality in the program code 251 to 
interpret spoken words as commands to the security system. Similarly, the security system can 
respond to spoken word commands with spoken word responses or tones. Software to perform 

25 voice recognition and voice response is widely available and known to those skilled in the art, 
though most existing software must be modified to support the relative noisy environment of the 
typical home. Patent 6,574,596, issued to Bi, et al, provides one example description of voice 
recognition, as does several well known textbooks. With the voice recognition and voice 
response as the primary interface mechanism, it is possible to implement a version of the 

30 inventive security system with no keypad 500 at all. The RFID readers 200 with acoustic 

transducers 210 can be used by authorized users to perform various functions, including the day 
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to day functions such as arming and disarming the system. One attractive advantage of 
incorporating voice recognition and voice response into the security system via the acoustic 
transducer 210 in the RFID reader 200 is that the security system can be armed or disarmed from 
any room in the house in which an RFID reader 200 is installed. The voice commands received 
5 at a single RFID reader 200 can be communicated to the controller functions 250 of all other 
devices in the security system. 

Another interface mechanism available for use with the security system is a USB gateway 510 
that enables a desktop or laptop computer to be used for downloading, uploading, or editing the 
configuration stored in the controller functions 250. The USB gateway 510 connects to and can 

10 obtain power from the Universal Serial Bus (USB) port commonly installed in most computers 
450 today. The USB gateway device 510 then converts signals from the USB port to backscatter 
modulation or active RF communications 422 with an RFID reader 200 or gateway 300, thereby 
providing access to the configuration data stored by the controller functions 250. A software 
program provided with the USB gateway 510 enables the user to access the USB gateway 510 

15 via the USB port, and display, edit, or convert the configuration data. In this manner, authorized 
users have an easy mechanism to create labels for each of the RFID readers 200, gateways 300, 
RFID transponders 100, and other devices 550. For example, a particular RFID transponder 100 
may be labeled "Living Room Window" so that any alert generated by the security system can 
identify by label the room in which the intrusion has occurred. The labels created for the various 

20 devices can also be displayed on the keypad 500 to show, for example, which zones are in an 
open or closed state. 

Though most homes obtain internet access via a broadband or modem connection, the USB 
gateway 5 1 0 can also be used to send or receive email on the PC 450 via the modules 3 1 0 to 3 1 3 
installed in a gateway 300. This therefore expands the capability and cost effectiveness of the 
25 inventive security system, and expands its use beyond just security. 

In a similar manner, the security systems also supports an email device 530 that uses active RF 
communications 422, backscatter modulation 421, or power line carrier communications 202 to 
communicate with the RFID readers 200 and gateways 300. This email device 530, which can 
take the form of a palm-type organizer or other forms, will typically be used to send and receive 
30 email via the modules 3 1 0 to 3 1 3 installed in a gateway 300. As described earlier, the various 
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devices in the security system self form a network, thereby enables messages to originate on any 
device and terminate on any capable device. Therefore, it is not necessary that the email device 
530 be near a gateway 300. If necessary, messages can be received via the modules 310 to 313 
installed in a gateway 300, be routed through multiple RFID readers 200 and then terminate at 
5 the email device 530. The primary advantage of including an email device 530 in the security 
system is to provide the homeowner a device that it always on and available for viewing. There 
are a greater number of wireless phones in use today capable of sending and receiving SMS 
messages. The email device 530 provides a convenient always on device whereby family 
members can sent short messages to each other. Alternately, in another example, one spouse can 
10 leave a message for another spouse before leaving work. 

As an alternative to using a USB gateway 510, the security system also supports a WiFi gateway 
520. WiFi, also known as 802.1 lb, is becoming a more prevalent form of networking computers. 
Recently, Intel made available a new chip called Centrino by which most new computers will 
automatically come equipped with WiFi support. Therefore, rather than using a USB gateway 

15 510 that connects to a port on the computer 450, a gateway 300 can have a WiFi module 520 
installed in the PCMCIA or CF slot 330. WiFi modules with these form factors are available 
from a number of manufacturers, such as Bromax. The gateway 300 with WiFi module 520 can 
provide either local access from a local PC 450 (assuming that the local PC supports WiFi) to the 
security system, or alternately from the security system to a public WiFi network 404. It is 

20 expected that in the near future, some neighborhoods will be wired with public WiFi networks 
404. These public WiFi networks 404 will provide another alternative access means to the 
internet from homes (in addition to cable modems 440 and DSL 441, for example). There may be 
users, therefore, that may prefer the security system to provide alerts through this network rather 
than a PSTN 403 or CMRS 402 network. In the event these public WiFi networks 404 become 

25 prevalent, then the security system can offer the email access described above through these 

networks as well. The gateway 300 with WiFi module 520 primarily acts as a protocol converter 
between the chosen modulation and protocol used within the security system and the 802.1 lb 
standard. In addition to the protocol conversion, the gateway 300 with WiFi module 520 also 
provides a software based security barrier similar to a firewall to prevent unauthorized access to 

30 the security system. Any application accessing the security system, whether on a local PC 450 or 
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remote through a public WiFi network 404, must possess and use one of the master keys 265 
provided by the one of the gateways 300 or RFID readers 200. 

Through one or more of the gateways 300, the security system can access external networks 410 
as well as be accessed through these same networks. Some users may find it useful to be able to 
5 visually or audibly monitor their home or building remotely. Therefore, the security system also 
supports camera devices 540 and audio devices 540, as well as combination camera/audio 
devices 540 that enable a user to remotely see and/or hear what it occurring in a home or 
building. Each of the devices can be individually addressed, since like the RFID readers 200 and 
gateways 300, since each is provided with a unique identity. The camera device 540 can be 

10 implemented as an RFID reader 200 with a camera component or the camera device can be 
manufactured without RFID reading capability, an the option of the designer. When a security 
system causes an alert, an emergency response agency 460 or an authorized user can be 
contacted. In addition to reporting the alert, as well as the device (i.e. identity of the RFID 
transponder 1 00) causing the alert, the security system can be configured to provide pictures 

15 and/or audio clips of the activity occurring within the security system. Low cost miniature 
cameras are widely available for PC and wireless phone use, and formats for transmitting 
pictures taken by these miniature cameras is also widely known. In the inventive security system, 
cameras and/or microphones are packaged in a manner similar to RFID readers 200. These 
devices 540 are powered locally and support active RF communications 422 or power line carrier 

20 communications 202 so as to transfer pictures and/or audio to the appropriate gateway 300. 
These devices will be particularly useful in communities in which the emergency response 
agency 460 requires confirmation of intrusion prior to dispatching police. 

There are multiple uses for the audio and camera support in the security system in addition to 
alarm verification by an emergency response agency 460. A caregiver can check in on the status 

25 of an elderly person living alone using the audio and/or camera capabilities of the security 
system. A family on a trip can check in on the activities of a pet left at home. The owner of a 
vacation home can periodically check in on the property during the winter months when the 
vacation home is otherwise unoccupied. By combining the audio and/or camera capability with 
the USB gateway 510 and a local PC 450, a use can store picture and audio files on the PC 450 

30 to provide a continuous record of activities in the home. As an alternative to storing pictures on a 
local PC 450, a device 550 can be provided with a large enough memory 266 to contain a file 
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system wherein the file system stores pictures periodically taken by one or more cameras in the 
security system. The pictures in the file system can be accessed later to retrieve pictures taken at 
particular times. 

One advantageous device in which a camera can be included is an other device 550 with smoke 
5 detection capability. Since smoke detectors are generally mounted on ceilings, the inclusion of 
camera capability into a ceiling mounted smoke detector will provide the camera with a wide 
angle of view with little likely viewing obstruction. A smoke detection device with AC power 
provided will already include many or all of the elements shown in Figure 5 A; therefore it is 
only an incremental cost to add the camera capability as a further device specific capability 263. 

10 The inventive security system does not require all smoke detectors installed in a home to be 
devices 550 as defined in this specification. Certain manufacturers, such as a Firex, already 
provide families of low cost smoke detectors that have a wired communications capability; that 
is, if one smoke detector detects smoke and causes an audible alert, all smoke detectors that are 
wired to the detecting smoke detector also cause an audible alert. Using the present invention, 

15 one of the example Firex smoke detectors can be replaced with a smoke detection device 550 of 
the inventive security system, and if any of the Firex family of smoke detectors causes an alert 
and sends a communications via the standard Firex wired communications, the smoke detection 
device 550 of the inventive security system will receive the same communications as all Firex 
smoke detectors on the same circuit, and the inventive security system can cause its own alert 

20 using its own audible capability and/or any gateway devices 300 installed in the inventive 
security system. This ability to convert the wired communications from an existing Firex 
network of smoke detectors into an appropriate communications within the inventive security 
system obviates the need for a user to replace all of the smoke detectors in a home when 
installing an inventive security system. Note that while smoke detectors and Firex have been 

25 used as examples, other types of sensors and other brands / manufacturers can be substituted into 
this specification without detracting from the inventive nature. 

In addition to detecting intrusion, the security system can monitor the status of other 
environmental quantities such as fire, smoke, heat, water, gases, temperature, vibration, motion, 
as well as other measurable events or items, whether environmental or not (i.e. presence, range, 
30 location). The list of sensor possibilities is not meant to be exhaustive, and many types of sensors 
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already exist today. The inventive nature of this security system is enabling the reading and 
monitoring of various other sensor types 620 by an RFID based security system using 
backscatter modulation 421 or active RF communications 422, whereby the monitoring of 
intrusion is combined with the monitoring of other measurable quantities, and placed under the 
5 control of a common master controller. For each of these sensor types 620 , the security system 
can be configured to report an alert based upon a change in the condition or quantity being 
measured, or by said condition or quantity reaching a particular relationship to a predetermined 
threshold, where the relationship can be, for example, one or more of less than, equal to, or more 
than (i.e. a monitored temperature is less than or equal to a predetermined threshold such as the 
10 freezing point). 

These detection devices can be created in at least two forms, depending upon the designer's 
preference. In one example embodiment, an appropriate sensor can be connected to an RFID 
transponder 100, in a manner similar to that by which an intrusion sensor 600 is connected to the 
RFID transponder 100. All of the previous discussion relating to the powering of an LED 
15 generator 601 by the RFID transponder 100 applies to the powering of appropriate sensors as 

well. This embodiment enables the creation of low cost sensors, as long as the sensors are within 
the reader range of RFID readers 200. 

In a second example embodiment, these sensor devices may be independently powered, much as 
RFID readers 200 and gateways 300 are independently powered. Each of these detection devices 

20 are created by combining an sensor appropriate for the quantity being measured and monitored 
with a local power supply 264, processor 261, and a communications means 262 that may 
include any of active RF 422, backscatter modulation 421, or power line carrier communications 
202. In either of these example embodiments, the detection devices must be registered using the 
same means as discussed for RFID readers 200, gateways 300, and other devices 550. These 

25 sensor devices may find great use in monitoring the status of unoccupied buildings, such as 

vacation homes. A temperature sensor may be useful in alerting a remote building owner if the 
heating system and failed and the building plumbing is in danger of freezing. Similarly, a flood 
prone building can be monitoring for rising water while otherwise unoccupied. 

In addition to performing the functions described herein within a single building or home, the 
30 security system in one building can also operate in concert with an inventive security system 
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installed in one or more other buildings through a networking capability. There are two levels of 
networking supported by the security system: local and server-based. Local networking operates 
using active RF communications 422 between security systems installed in two different 
buildings. Because of the power levels supported during active RF communications 422, the 
5 distance between the security systems in the two buildings can be a mile or greater, depending 
upon terrain. Each of the security systems remain under the control of their respective master 
controllers, and the controller function 250, including both the program code 251 and 
configuration data 252, of each device remains dedicated to its own security system. However, 
an authorized user of one security system and an authorized user of a second security system can 
10 command their respective systems to permit communications between the two said security 
systems, thereby creating a network between the two systems. This network can exist between 
more than just two systems; for example, an entire neighborhood of homes, each with an 
inventive security system, can permit their respective security systems to network with other 
security systems in the neighborhood. 

15 When two or more security systems are networked using active RF communications 422, various 
capabilities of each security system can be shared. For example, a first security system in a first 
home can access a gateway 300 associated with a second security system in a second home. This 
may be advantageous if, for example, an intruder were to cut the phone line associated with the 
first home, thereby rendering useless a gateway 300 with modem module 310 installed in the 

20 first security system. It is unlikely that an intruder would know to cut the phone lines associated 
with multiple homes. In another example, if a child wearing an RFID transponder 100 associated 
with the first security system is present in the second home, the second security system can read 
the RFID transponder 100 on the child and provide the read data to the first security system, 
thereby enabling a parent to locate a child at either the first home or the second home. In yet 

25 another example, if the first security system in the first home causes an alert, and the occupants 
are away on travel, the first security system can request the second security system to also cause 
an alert thereby notifying the neighbors at the second home of the alert and enabling them to 
investigate the cause of the alert at the first home. 

When two security systems are beyond the range of communications via active RF 
30 communications 422, the security systems may still form a network through their respective 

gateways 300. The security systems may either network through direct connection between their 
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respective gateways 300 or may network through an intermediate server. The use of an 
intermediate server can enable the first security system and the second security system to have 
different types of modules 310 to 313 installed in the gateway 300 of each respective security 
system. Since a commercial emergency response agency will likely already have servers 
5 equipped to supported the various types of modules 310 to 313 installed in various gateways 300, 
the provision of an intermediate server for networking security systems may present an expanded 
business opportunity. 

Networking through intermediate servers expands the applications and usefulness of the 
inventive security system. For example, there may be a caregiver that would like to monitor an 
10 elderly parent living alone in another city. Using the networking feature, the caregiver can 

monitor the armed/disarmed status of the security system in the home of the elderly parent, use 
two-way audio and/or the camera of the security system to check on the elderly parent, and 
monitor any RFID transponder 100 worn by the elderly parent. This may be equally useful for 
parents to monitor a student living away at college, and other similar family situations. 

15 In either form of networking, the security system can provide an authentication mechanism to 

ensure that networking is not inadvertently enabled with another unintended security system. The 
authentication mechanism may consist of the mutual entering of an agreed security code in each 
of the two security systems which are to network. In their communications with each other, the 
two security systems may send and verify that the security codes properly match before 

20 permitting various operations between the two systems. Other authentication mechanisms may 
also be used, such as the shared used of a designated master key RFID transponder 265. In this 
example, rather that requiring the mutual entering of an agreed security code, each of the 
security systems which are to network can be required to first read the same designated master 
key RFID transponder 265. As described earlier, the reading of master key RFID transponders 

25 265 requires a close physical proximity generally attainable only by authorized users. 

In addition to the physical embodiments described herein, various components of the security 
system can be manufactured in other physical embodiments. For example, modern outlet boxes 
used for both outlets and light switches are available in sizes of 20 cubic inches or more. In fact, 
many modern electrical codes require the use of the these larger boxes. Within an enclosure of 
30 20 cubic inches or more, an RFID reader 200 can be manufactured and mounted in a form 
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integrated with an outlet or a light switch as shown in Figure 18B. The installation of this 
integrated RFID reader 200 would require the removal of a current outlet, and the connection of 
the AC power lines to the integrated RFID reader 200/outlet. The AC power lines would power 
both the RFID reader 200 and the outlet. In addition to a cleaner physical appearance, this 
5 integrated RFID reader 200/outlet would provide the same two outlet connection points as 
standard outlets and provide a concealed RFID reader 200 capability. In a similar manner, an 
integrated RFID reader 200/light switch can also be manufactured for mounting within an outlet 
box. 

The true scope of the present invention is not limited to the presently preferred embodiments 
10 disclosed herein. As will be understood by those skilled in the art, for example, different 
components, such as processors or chipsets, can be chosen in the design, packaging, and 
manufacture of the various elements of the present invention. The discussed embodiments of the 
present invention have generally relied on the availability of commercial chipsets, however many 
of the functions disclosed herein can also be implemented by a designer using discrete circuits 
15 and components. As a further example, the RFID reader 200 and RFID transponder 100 can 
operate at different frequencies than those discussed herein, or the gateways 300 and RFID 
readers 200 can use alternate RF or power line communications protocols. Also, certain 
functions which have been discussed as optional may be incorporated as part of the standard 
product offering if customer purchase patterns dictate certain preferred forms. Finally, this 
20 document generally references US standards, customs, and FCC rules. Various parameters, such 
as input power or output power for example, can be adjusted to conform with international 
standards. According, except as they may be expressly so limited, the scope of protection of the 
following claims is not intended to be limited to the specific embodiments described above. 
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